Changelog for ipsec-tools-0.8.2-88.148.i586.rpm :

* Fri Jan 26 2018 jbohacAATTsuse.com- avoid-dos-with-fragment-out-of-order.patch (bsc#1047443, CVE-2016-10396)
* Wed Nov 29 2017 meissnerAATTsuse.com- ipsec-tools-openssl1.1.patch: build against openssl 1.1 (bsc#1066950)
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Sat Sep 02 2017 chrisAATTcomputersalat.de- add reminder for racoon-setkey.service to setkey.conf
* Wed Aug 05 2015 meissnerAATTsuse.com- do not run %fdupes over the whole tree, to avoid symlinking /etc/ config files and /usr/ sample configs.
* Wed Jun 10 2015 chrisAATTcomputersalat.de- rework racoon.psk.patch
* comment example entry (its not a backdoor just an example)
* Thu Jun 04 2015 tchvatalAATTsuse.com- Cleanup most of the rpmlint warnings to have it in better shape
* Thu Apr 23 2015 meissnerAATTsuse.com- racoon-fips-rsa.patch: Use a default exponent of at least 65537 (minimum FIPS required public exponent)- racoon-no-md5.patch: replace one md5 usage by sha1 in an internal hash table. Allow md5 usage for an external visible interface, as it is also hashing only.
* Thu Jan 22 2015 p.drouandAATTgmail.com- Update to version 0.8.2
* Fix admin port establish-sa for tunnel mode SAs
* Fix source port selection regression from version 0.8.1
* Various logging improvements
* Additional compliance and build fixes- Changes from version 0.8.1
* Improved X.509 subject name comparation
* Relax DPD cookie check for Cisco IOS compatibility
* Allow simplified syntax for inherited remote blocks
* Never shring pfkey socket buffer
* Privilege separation child process exit fix
* Multiple memory allocation and use-after-free fixes- Remove some obsolete macros
* Tue Jul 08 2014 meissnerAATTsuse.com- ipsec-tools-0.8.0-certasn1txtbroken.patch: disable the certificate test in src/racoon/eaytest.c as the internal X.509 ASN.1 string presentation was changed in openssl and the test currently does not work.