Even though the single DES fix is security sensitive, nobody in their right mind should be using single DES any way. So the real critical issues are the fixes for Bug#307233 and Bug#303573. I believe these fixes warrant pushing ipsec-tools-0.5.2 into sarge. The package is priority extra. Thanks.Approved because the upstream diff was relatively short, but it was still far longer than it needed to be to fix the bugs cited.
Thank you. The patch is long because of gcc-4.0 compilation fixes. I forgot to close the (Bug#305616) in the changelog. One of the upstream maintainers (Aidas Kasparas) closely monitors the bugs in the package and has included the fixes upstream.
Ganesan