libreswan: Update to v5.3

**Summary**
- Release notes can be found [here](https://github.com/libreswan/libreswan/releases/tag/v5.3).

**Security**
Includes fixes for:
CVE-2023-30570
CVE-2023-38710
CVE-2023-38711
CVE-2023-38712
CVE-2024-3652
CVE-2024-3652

Author: androidnisse

packages/l/libreswan/abi_used_libs

@@ -2,12 +2,11 @@ libc.so.6
 libcap-ng.so.0
 libcrypt.so.2
 libcurl.so.4
-libevent-2.1.so.7
+libevent_core-2.1.so.7
 libevent_pthreads-2.1.so.7
-libldns.so.3
 libnspr4.so
 libnss3.so
+libnssutil3.so
 libpam.so.0
 libsmime3.so
-libsystemd.so.0
-libunbound.so.8
+libssl3.so

packages/l/libreswan/abi_used_symbols

@@ -1,23 +1,21 @@
 libc.so.6:__assert_fail
 libc.so.6:__ctype_b_loc
-libc.so.6:__ctype_tolower_loc
 libc.so.6:__errno_location
 libc.so.6:__fprintf_chk
 libc.so.6:__isoc99_fscanf
-libc.so.6:__isoc99_sscanf
 libc.so.6:__libc_start_main
 libc.so.6:__memcpy_chk
 libc.so.6:__memmove_chk
 libc.so.6:__memset_chk
 libc.so.6:__printf_chk
+libc.so.6:__read_chk
 libc.so.6:__snprintf_chk
+libc.so.6:__sprintf_chk
 libc.so.6:__stack_chk_fail
-libc.so.6:__stpcpy_chk
-libc.so.6:__strcpy_chk
-libc.so.6:__strncpy_chk
 libc.so.6:__syslog_chk
 libc.so.6:__vfprintf_chk
 libc.so.6:__vsnprintf_chk
+libc.so.6:__xpg_strerror_r
 libc.so.6:_exit
 libc.so.6:abort
 libc.so.6:accept
@@ -30,10 +28,10 @@ libc.so.6:clock_gettime
 libc.so.6:close
 libc.so.6:closelog
 libc.so.6:connect
-libc.so.6:ctime
 libc.so.6:dup
 libc.so.6:dup2
 libc.so.6:execve
+libc.so.6:execvp
 libc.so.6:exit
 libc.so.6:fclose
 libc.so.6:fcntl
@@ -49,24 +47,24 @@ libc.so.6:fputc
 libc.so.6:fputs
 libc.so.6:fread
 libc.so.6:free
+libc.so.6:freeaddrinfo
 libc.so.6:freeifaddrs
 libc.so.6:freopen
+libc.so.6:fstat
 libc.so.6:fwrite
+libc.so.6:getaddrinfo
 libc.so.6:getc
 libc.so.6:getcwd
 libc.so.6:getdtablesize
-libc.so.6:getenv
-libc.so.6:gethostbyname2
 libc.so.6:gethostname
 libc.so.6:getifaddrs
-libc.so.6:getnameinfo
-libc.so.6:getnetbyname
 libc.so.6:getopt_long
 libc.so.6:getpass
 libc.so.6:getpid
 libc.so.6:getprotobyname
 libc.so.6:getservbyname
 libc.so.6:getsockname
+libc.so.6:getsockopt
 libc.so.6:glob
 libc.so.6:globfree
 libc.so.6:gmtime_r
@@ -87,25 +85,26 @@ libc.so.6:memset
 libc.so.6:mkdir
 libc.so.6:open
 libc.so.6:openlog
+libc.so.6:optarg
+libc.so.6:optind
 libc.so.6:pclose
 libc.so.6:perror
 libc.so.6:pipe
+libc.so.6:pipe2
 libc.so.6:poll
 libc.so.6:popen
 libc.so.6:pthread_cond_signal
 libc.so.6:pthread_cond_wait
 libc.so.6:pthread_create
-libc.so.6:pthread_join
+libc.so.6:pthread_mutex_init
 libc.so.6:pthread_mutex_lock
 libc.so.6:pthread_mutex_unlock
 libc.so.6:pthread_self
 libc.so.6:pthread_setschedprio
 libc.so.6:putchar
 libc.so.6:puts
 libc.so.6:qsort
-libc.so.6:rand
 libc.so.6:read
-libc.so.6:readlink
 libc.so.6:realloc
 libc.so.6:recvfrom
 libc.so.6:recvmsg
@@ -120,13 +119,12 @@ libc.so.6:setsid
 libc.so.6:setsockopt
 libc.so.6:setvbuf
 libc.so.6:sleep
-libc.so.6:snprintf
 libc.so.6:socket
-libc.so.6:srand
 libc.so.6:stat
-libc.so.6:stpcpy
+libc.so.6:stderr
+libc.so.6:stdin
+libc.so.6:stdout
 libc.so.6:strcasecmp
-libc.so.6:strcat
 libc.so.6:strchr
 libc.so.6:strcmp
 libc.so.6:strcpy
@@ -136,22 +134,18 @@ libc.so.6:strerror
 libc.so.6:strftime
 libc.so.6:strlen
 libc.so.6:strncasecmp
-libc.so.6:strncat
 libc.so.6:strncmp
 libc.so.6:strncpy
 libc.so.6:strndup
 libc.so.6:strnlen
 libc.so.6:strrchr
-libc.so.6:strsep
 libc.so.6:strsignal
 libc.so.6:strspn
 libc.so.6:strstr
-libc.so.6:strtok
 libc.so.6:strtol
 libc.so.6:strtoul
 libc.so.6:sysconf
 libc.so.6:system
-libc.so.6:time
 libc.so.6:umask
 libc.so.6:uname
 libc.so.6:unlink
@@ -160,6 +154,8 @@ libc.so.6:waitpid
 libc.so.6:write
 libcap-ng.so.0:capng_apply
 libcap-ng.so.0:capng_clear
+libcap-ng.so.0:capng_get_caps_process
+libcap-ng.so.0:capng_have_capability
 libcap-ng.so.0:capng_updatev
 libcrypt.so.2:crypt
 libcurl.so.4:curl_easy_cleanup
@@ -168,64 +164,45 @@ libcurl.so.4:curl_easy_perform
 libcurl.so.4:curl_easy_setopt
 libcurl.so.4:curl_global_cleanup
 libcurl.so.4:curl_global_init
-libevent-2.1.so.7:event_add
-libevent-2.1.so.7:event_assign
-libevent-2.1.so.7:event_base_free
-libevent-2.1.so.7:event_base_loop
-libevent-2.1.so.7:event_base_new
-libevent-2.1.so.7:event_debug_unassign
-libevent-2.1.so.7:event_del
-libevent-2.1.so.7:event_free
-libevent-2.1.so.7:event_get_events
-libevent-2.1.so.7:event_get_version
-libevent-2.1.so.7:event_get_version_number
-libevent-2.1.so.7:event_initialized
-libevent-2.1.so.7:event_new
-libevent-2.1.so.7:event_pending
-libevent-2.1.so.7:event_set_mem_functions
-libevent-2.1.so.7:evthread_make_base_notifiable
-libevent-2.1.so.7:libevent_global_shutdown
+libevent_core-2.1.so.7:evconnlistener_free
+libevent_core-2.1.so.7:evconnlistener_new
+libevent_core-2.1.so.7:event_add
+libevent_core-2.1.so.7:event_assign
+libevent_core-2.1.so.7:event_base_free
+libevent_core-2.1.so.7:event_base_loop
+libevent_core-2.1.so.7:event_base_loopbreak
+libevent_core-2.1.so.7:event_base_new
+libevent_core-2.1.so.7:event_debug_unassign
+libevent_core-2.1.so.7:event_del
+libevent_core-2.1.so.7:event_get_events
+libevent_core-2.1.so.7:event_get_version
+libevent_core-2.1.so.7:event_get_version_number
+libevent_core-2.1.so.7:event_initialized
+libevent_core-2.1.so.7:event_pending
+libevent_core-2.1.so.7:event_set_mem_functions
+libevent_core-2.1.so.7:evthread_make_base_notifiable
+libevent_core-2.1.so.7:evutil_make_socket_closeonexec
+libevent_core-2.1.so.7:evutil_make_socket_nonblocking
+libevent_core-2.1.so.7:libevent_global_shutdown
 libevent_pthreads-2.1.so.7:evthread_use_pthreads
-libldns.so.3:ldns_buffer_free
-libldns.so.3:ldns_buffer_new
-libldns.so.3:ldns_buffer_printf
-libldns.so.3:ldns_lookup_by_id
-libldns.so.3:ldns_pkt_answer
-libldns.so.3:ldns_pkt_qdcount
-libldns.so.3:ldns_pkt_question
-libldns.so.3:ldns_rdf2buffer_str_a
-libldns.so.3:ldns_rdf2buffer_str_aaaa
-libldns.so.3:ldns_rdf2buffer_str_dname
-libldns.so.3:ldns_rdf2buffer_str_ipseckey
-libldns.so.3:ldns_rdf2buffer_str_str
-libldns.so.3:ldns_rdf_data
-libldns.so.3:ldns_rr2buffer_str_fmt
-libldns.so.3:ldns_rr_class2buffer_str
-libldns.so.3:ldns_rr_get_class
-libldns.so.3:ldns_rr_get_type
-libldns.so.3:ldns_rr_list_rr
-libldns.so.3:ldns_rr_list_rr_count
-libldns.so.3:ldns_rr_owner
-libldns.so.3:ldns_rr_rdf
-libldns.so.3:ldns_rr_ttl
-libldns.so.3:ldns_rr_type2buffer_str
-libldns.so.3:ldns_wire2pkt
 libnspr4.so:PR_Assert
 libnspr4.so:PR_Cleanup
 libnspr4.so:PR_Close
+libnspr4.so:PR_CreateIOLayerStub
+libnspr4.so:PR_ErrorToName
 libnspr4.so:PR_ErrorToString
 libnspr4.so:PR_ExplodeTime
 libnspr4.so:PR_FormatTime
 libnspr4.so:PR_Free
 libnspr4.so:PR_GMTParameters
 libnspr4.so:PR_GetError
-libnspr4.so:PR_GetErrorText
-libnspr4.so:PR_GetErrorTextLength
+libnspr4.so:PR_GetUniqueIdentity
 libnspr4.so:PR_Init
 libnspr4.so:PR_Malloc
 libnspr4.so:PR_Now
 libnspr4.so:PR_Open
 libnspr4.so:PR_Read
+libnspr4.so:PR_SetError
 libnss3.so:CERT_AddCertToListTail
 libnss3.so:CERT_AsciiToName
 libnss3.so:CERT_CRLCacheRefreshIssuer
@@ -236,7 +213,6 @@ libnss3.so:CERT_CompareAVA
 libnss3.so:CERT_DecodeAVAValue
 libnss3.so:CERT_DecodeAltNameExtension
 libnss3.so:CERT_DecodeCRLDistributionPoints
-libnss3.so:CERT_DecodeDERCrl
 libnss3.so:CERT_DestroyCertList
 libnss3.so:CERT_DestroyCertificate
 libnss3.so:CERT_DestroyCertificateList
@@ -257,6 +233,7 @@ libnss3.so:CERT_ImportCRL
 libnss3.so:CERT_IsCACert
 libnss3.so:CERT_IsCADERCert
 libnss3.so:CERT_IsRootDERCert
+libnss3.so:CERT_NameToAscii
 libnss3.so:CERT_NewCertList
 libnss3.so:CERT_NewTempCertificate
 libnss3.so:CERT_OCSPCacheSettings
@@ -265,13 +242,15 @@ libnss3.so:CERT_SetOCSPDefaultResponder
 libnss3.so:CERT_SetOCSPFailureMode
 libnss3.so:CERT_SetOCSPTimeout
 libnss3.so:DER_DecodeTimeChoice
-libnss3.so:DSAU_DecodeDerSigToLen
 libnss3.so:DSAU_EncodeDerSigWithLen
 libnss3.so:NSS_Initialize
+libnss3.so:NSS_IsInitialized
 libnss3.so:NSS_NoDB_Init
 libnss3.so:NSS_Shutdown
+libnss3.so:PK11_AEADOp
 libnss3.so:PK11_Authenticate
 libnss3.so:PK11_CipherOp
+libnss3.so:PK11_CopyTokenPrivKeyToSessionPrivKey
 libnss3.so:PK11_CreateContextBySymKey
 libnss3.so:PK11_CreateDigestContext
 libnss3.so:PK11_Decrypt
@@ -282,7 +261,7 @@ libnss3.so:PK11_DigestFinal
 libnss3.so:PK11_DigestKey
 libnss3.so:PK11_DigestOp
 libnss3.so:PK11_Encrypt
-libnss3.so:PK11_ExtractKeyValue
+libnss3.so:PK11_Finalize
 libnss3.so:PK11_FindCertFromNickname
 libnss3.so:PK11_FindKeyByAnyCert
 libnss3.so:PK11_FindKeyByKeyID
@@ -292,7 +271,6 @@ libnss3.so:PK11_GenerateKeyPair
 libnss3.so:PK11_GenerateRandom
 libnss3.so:PK11_GetBestSlot
 libnss3.so:PK11_GetInternalKeySlot
-libnss3.so:PK11_GetKeyData
 libnss3.so:PK11_GetKeyLength
 libnss3.so:PK11_GetLowLevelKeyIDForCert
 libnss3.so:PK11_GetLowLevelKeyIDForPrivateKey
@@ -305,13 +283,15 @@ libnss3.so:PK11_KeyGen
 libnss3.so:PK11_ListCertsInSlot
 libnss3.so:PK11_ListPrivateKeysInSlot
 libnss3.so:PK11_MakeIDFromPubKey
+libnss3.so:PK11_MapSignKeyType
 libnss3.so:PK11_MoveSymKey
 libnss3.so:PK11_NeedLogin
 libnss3.so:PK11_ParamFromIV
 libnss3.so:PK11_ProtectedAuthenticationPath
 libnss3.so:PK11_PubDerive
 libnss3.so:PK11_PubDeriveWithKDF
 libnss3.so:PK11_RandomUpdate
+libnss3.so:PK11_ReferenceSlot
 libnss3.so:PK11_ReferenceSymKey
 libnss3.so:PK11_SetPasswordFunc
 libnss3.so:PK11_Sign
@@ -327,31 +307,37 @@ libnss3.so:PORT_Free
 libnss3.so:PORT_FreeArena
 libnss3.so:PORT_GetError
 libnss3.so:PORT_NewArena
-libnss3.so:PORT_SetError
 libnss3.so:PORT_Strdup
 libnss3.so:PORT_ZAlloc
 libnss3.so:SECITEM_AllocItem
-libnss3.so:SECITEM_CopyItem
-libnss3.so:SECITEM_DupItem
 libnss3.so:SECITEM_FreeItem
 libnss3.so:SECITEM_ItemsAreEqual
 libnss3.so:SECKEY_ConvertToPublicKey
+libnss3.so:SECKEY_CopyPrivateKey
+libnss3.so:SECKEY_CopyPublicKey
 libnss3.so:SECKEY_CreateDHPrivateKey
 libnss3.so:SECKEY_CreateECPrivateKey
+libnss3.so:SECKEY_DecodeDERSubjectPublicKeyInfo
 libnss3.so:SECKEY_DestroyPrivateKey
 libnss3.so:SECKEY_DestroyPrivateKeyList
 libnss3.so:SECKEY_DestroyPublicKey
+libnss3.so:SECKEY_DestroySubjectPublicKeyInfo
+libnss3.so:SECKEY_EncodeDERSubjectPublicKeyInfo
 libnss3.so:SECKEY_ExtractPublicKey
 libnss3.so:SECKEY_GetPrivateKeyType
 libnss3.so:SECKEY_GetPublicKeyType
 libnss3.so:SECKEY_PublicKeyStrengthInBits
-libnss3.so:SECKEY_SignatureLen
 libnss3.so:SECMOD_DeleteInternalModule
 libnss3.so:SECMOD_GetInternalModule
 libnss3.so:SECOID_FindOIDByTag
+libnss3.so:SEC_ASN1EncodeItem
 libnss3.so:SEC_CheckCrlTimes
 libnss3.so:SEC_DestroyCrl
 libnss3.so:SEC_LookupCrls
+libnss3.so:SEC_ObjectIDTemplate
+libnss3.so:SGN_Digest
+libnss3.so:VFY_VerifyDigestDirect
+libnssutil3.so:SECITEM_MakeItem
 libpam.so.0:pam_acct_mgmt
 libpam.so.0:pam_authenticate
 libpam.so.0:pam_end
@@ -364,19 +350,13 @@ libsmime3.so:SEC_PKCS7DecodeItem
 libsmime3.so:SEC_PKCS7DestroyContentInfo
 libsmime3.so:SEC_PKCS7EncodeItem
 libsmime3.so:SEC_PKCS7GetCertificateList
-libsystemd.so.0:sd_notify
-libsystemd.so.0:sd_notifyf
-libsystemd.so.0:sd_watchdog_enabled
-libunbound.so.8:ub_cancel
-libunbound.so.8:ub_ctx_add_ta_file
-libunbound.so.8:ub_ctx_create
-libunbound.so.8:ub_ctx_create_event
-libunbound.so.8:ub_ctx_debuglevel
-libunbound.so.8:ub_ctx_delete
-libunbound.so.8:ub_ctx_hosts
-libunbound.so.8:ub_ctx_resolvconf
-libunbound.so.8:ub_ctx_set_option
-libunbound.so.8:ub_resolve
-libunbound.so.8:ub_resolve_event
-libunbound.so.8:ub_resolve_free
-libunbound.so.8:ub_strerror
+libssl3.so:SSL_BadCertHook
+libssl3.so:SSL_ConfigServerCert
+libssl3.so:SSL_ConfigServerSessionIDCache
+libssl3.so:SSL_ExportKeyingMaterial
+libssl3.so:SSL_ForceHandshake
+libssl3.so:SSL_HandshakeCallback
+libssl3.so:SSL_ImportFD
+libssl3.so:SSL_OptionSet
+libssl3.so:SSL_PeerCertificate
+libssl3.so:SSL_ResetHandshake