openswan bug fix update

Updated openswan packages that resolve several issues are now available.

Openswan is a free implementation of IPsec & IKE for Linux. IPsec stands
for Internet Protocol Security, and uses strong cryptography to provide
both authentication and encryption services. These services allow you to
build secure tunnels through untrusted networks. Everything passing through
the untrusted net is encrypted by the ipsec gateway machine and decrypted
by the gateway at the other end of the tunnel. The resulting tunnel is a
virtual private network, or VPN.

This package contains the daemons and userland tools for setting up
Openswan on Red Hat Enterprise Linux 5.

Openswan provides an alternative to the ipsec-tools package, and includes
additional functionality that users may find useful. Users of the
ipsec-tools package may wish to evaluate Openswan.

These updated openswan packages provide fixes for the following bugs:

* openswan and strongswan failed to interoperate
* openswan was supposed to negotiate a CCM algorithm and wasn't
* openswan was not accepting null esp auth algorithm
* openswan was segfaulting when phase2alg=null
* openswan IKEv2 daemon was crashing when interoperating with racoon2
* openswan was not deleting expired SA's

All users of openswan are advised to upgrade to these updated packages,
which resolve these issues.

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

450125 - [IPv6-DoD] openswan and strongswan fail to interoperate with IKEv2
450126 - IPV6DOD: openswan should negotiate CCM algorithm.
450127 - [IPv6-DoD] openswan doesn't accept null esp auth alg
450128 - openswan logging segfault when phase2alg=null
450129 - [IPv6-DoD] openswan IKEv2 crashes when interoperating with racoon2
450334 - openswan doesn't delete expired SA's