libreswan: bump to 5.3.2

[Andrew Cagney (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Andrew Cagney <andrew.cagney%gmail.com@localhost>
Pushed By:	cagney
Date:		Sat Jul 18 23:49:40 2026 +0000
Changeset:	04c6ec843883a3c10aa134a9490c9785731489e7

Modified Files:
	libreswan/Makefile
	libreswan/TODO
	libreswan/distinfo

Log Message:
libreswan: bump to 5.3.2

v5.3.2 (July 15, 2026)
* Security: Fixes http://libreswan.org/security/CVE-2026-14957
* x509: tighten nss_compat BER check [Andrew]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=04c6ec843883a3c10aa134a9490c9785731489e7

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 libreswan/Makefile | 2 +-
 libreswan/TODO     | 5 ++---
 libreswan/distinfo | 6 +++---
 3 files changed, 6 insertions(+), 7 deletions(-)

diffs:
diff --git a/libreswan/Makefile b/libreswan/Makefile
index 9094ec5836..c6eef38da8 100644
--- a/libreswan/Makefile
+++ b/libreswan/Makefile
@@ -15,7 +15,7 @@
 #
 # libreswan: 5.0 5.0nb1 ...
 
-DISTNAME=	libreswan-5.3.1
+DISTNAME=	libreswan-5.3.2
 MASTER_SITES=   https://download.libreswan.org/
 
 CATEGORIES=	security
diff --git a/libreswan/TODO b/libreswan/TODO
index 29870dc27c..0ba2bf4426 100644
--- a/libreswan/TODO
+++ b/libreswan/TODO
@@ -1,14 +1,13 @@
-- platforms other than NetBSD (Linux, and FreeBSD)?
+- build package on platforms other than NetBSD
 
   PFKEYV2 and XFRM are pretty esoteric.
 
   Libreswan builds on Fedora, Debian, Alpine (they each have their own
   packaing quirks), FreeBSD, NetBSD, OpenBSD.
 
-  not sure about this package
-
 - add following entries to pkg-vulnerabilities
 
+libreswan<5.3.2		denial-of-service	https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt
 libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-12413/CVE-2026-12413.txt
 libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-50721/CVE-2026-50721.txt
 libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-50722/CVE-2026-50722.txt
diff --git a/libreswan/distinfo b/libreswan/distinfo
index e8a7fc39ac..9756bb9839 100644
--- a/libreswan/distinfo
+++ b/libreswan/distinfo
@@ -1,5 +1,5 @@
 $NetBSD$
 
-BLAKE2s (libreswan-5.3.1.tar.gz) = 1427f970d71381bf54a3ecd230830ec9fa6a94baffc80e060667b9efbfd78aa9
-SHA512 (libreswan-5.3.1.tar.gz) = 862a49ca867e7fe429a8223da3f28b372c242b9e94e7944cf7cc9b38e10604b286f42a2ac296e2cf4cfbbdade219eaeca519d732ecbcbfc2596a841aecc8cd99
-Size (libreswan-5.3.1.tar.gz) = 4222443 bytes
+BLAKE2s (libreswan-5.3.2.tar.gz) = ec4e3568530eb6d293b0088ee1c7cf4a4a9b84a3bfb3b5f459ba936f3c6a9612
+SHA512 (libreswan-5.3.2.tar.gz) = 4dfe71bed06d356c5a33e1874ec934eab8a57a2bdedff8069ebcf65b09dd79490665cbb5b94b691d6e873a0a8e6eb131a4942ffa845a5836a5344436c8efb879
+Size (libreswan-5.3.2.tar.gz) = 4223489 bytes