libreswan: bump to 5.3.1

[Andrew Cagney (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Andrew Cagney <andrew.cagney%gmail.com@localhost>
Pushed By:	cagney
Date:		Wed Jun 24 19:04:13 2026 +0000
Changeset:	08c8a0345eceb28d129434b9304e6fc6ed452251

Modified Files:
	libreswan/COMMIT_MSG
	libreswan/Makefile
	libreswan/TODO
	libreswan/distinfo

Log Message:
libreswan: bump to 5.3.1

v5.3.1 (June 24, 2026)
* Security: Fixes http://libreswan.org/security/CVE-2026-12413
* Security: Fixes http://libreswan.org/security/CVE-2026-50721
* Security: Fixes http://libreswan.org/security/CVE-2026-50722
* IKEv2: Fix error: variable `local_proposal` set but not used [Daiki]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=08c8a0345eceb28d129434b9304e6fc6ed452251

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 libreswan/COMMIT_MSG | 3 +--
 libreswan/Makefile   | 2 +-
 libreswan/TODO       | 8 ++++++--
 libreswan/distinfo   | 6 +++---
 4 files changed, 11 insertions(+), 8 deletions(-)

diffs:
diff --git a/libreswan/COMMIT_MSG b/libreswan/COMMIT_MSG
index 41574d63c4..b9bca3625d 100644
--- a/libreswan/COMMIT_MSG
+++ b/libreswan/COMMIT_MSG
@@ -1,4 +1,4 @@
-Libreswan: import version 5.1
+Libreswan: import version 5.3.1
 
 Libreswan is an Internet Key Exchange (IKE) daemon for managing IPsec.
 
@@ -11,4 +11,3 @@ Linux, Libreswan uses the XFRM IPsec stack.
 
 Libreswan was forked from Openswan 2.6.38, which was forked from
 FreeS/WAN 2.04. See the CREDITS files for contributor acknowledgments.
-
diff --git a/libreswan/Makefile b/libreswan/Makefile
index 30f4a53a6f..9094ec5836 100644
--- a/libreswan/Makefile
+++ b/libreswan/Makefile
@@ -15,7 +15,7 @@
 #
 # libreswan: 5.0 5.0nb1 ...
 
-DISTNAME=	libreswan-5.3
+DISTNAME=	libreswan-5.3.1
 MASTER_SITES=   https://download.libreswan.org/
 
 CATEGORIES=	security
diff --git a/libreswan/TODO b/libreswan/TODO
index 794263ac5a..29870dc27c 100644
--- a/libreswan/TODO
+++ b/libreswan/TODO
@@ -2,13 +2,17 @@
 
   PFKEYV2 and XFRM are pretty esoteric.
 
-  Libreswan builds on Fedora, Debian, Apline (they each
-  have their own packaing quirks), FreeBSD, NetBSD, OpenBSD
+  Libreswan builds on Fedora, Debian, Alpine (they each have their own
+  packaing quirks), FreeBSD, NetBSD, OpenBSD.
 
   not sure about this package
 
 - add following entries to pkg-vulnerabilities
 
+libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-12413/CVE-2026-12413.txt
+libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-50721/CVE-2026-50721.txt
+libreswan<5.3.1		denial-of-service	https://libreswan.org/security/CVE-2026-50722/CVE-2026-50722.txt
+
 libreswan<5.0rc3	denial-of-service	https://libreswan.org/security/CVE-2024-3652/CVE-2024-3652.txt
 libreswan<5.0rc2	denial-of-service	https://libreswan.org/security/CVE-2024-2357/CVE-2024-2357.txt
 
diff --git a/libreswan/distinfo b/libreswan/distinfo
index 51478434c7..e8a7fc39ac 100644
--- a/libreswan/distinfo
+++ b/libreswan/distinfo
@@ -1,5 +1,5 @@
 $NetBSD$
 
-BLAKE2s (libreswan-5.3.tar.gz) = cd9f92dee9065c73d4579cc17ac39e3f524552633e14f169037ee73fad9daef9
-SHA512 (libreswan-5.3.tar.gz) = 338fb82a9969da8fa78f64ec9eda0e3dcd216d6b8333a6f966ba839e31d3eb5fdd94613f0fff934be16ff8d84f6f4265c8b35f37c642569e042f65a58038ba0d
-Size (libreswan-5.3.tar.gz) = 4220520 bytes
+BLAKE2s (libreswan-5.3.1.tar.gz) = 1427f970d71381bf54a3ecd230830ec9fa6a94baffc80e060667b9efbfd78aa9
+SHA512 (libreswan-5.3.1.tar.gz) = 862a49ca867e7fe429a8223da3f28b372c242b9e94e7944cf7cc9b38e10604b286f42a2ac296e2cf4cfbbdade219eaeca519d732ecbcbfc2596a841aecc8cd99
+Size (libreswan-5.3.1.tar.gz) = 4222443 bytes