I've made a simple tool to check for differences in two rpm binary packages. The script check for diffs in:
Provides Requires ldd output nm output (minus addresses) diff -r on unpacked tree
I've run it against the openssl builds in:
http://bugzilla.fedora.us/show_bug.cgi?id=1395
For 7.x, the diffs are reasonable (Provides on %{name} differs due to differing release numbers, Requires adds ld-linux.so.2, binary files differ). However, for all the 8.0 builds, the symbol tables (nm output) differ non-trivally. Is this something we should be concerned about?