Debian Patches

Status for libreswan/5.2-2.5

Patch Description Author Forwarded Bugs Origin Last update
0001-do-not-use-git-version.patch do not use git version

avoid using git version when building debian package		 Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed 2015-03-21
0002-debian-pam.d-pluto.patch debian-pam.d-pluto Marc-Christian Petersen <m.c.p@gmx.de> not-needed 2016-03-09
0004-Include-features.h-to-enable-NSPR-workaround-for-854.patch Include features.h to enable NSPR workaround for #854472 on mipsel
The upstream fix was only to enable the right linkage on mipsel when
either __GLIBC__ or __UCLIBC__ were defined as preprocessor
directives. However, __GLIBC__ isn't defined unless <features.h> has
been read, which was not the case in the files modified here.		 Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2023-03-10
0001-building-pass-1L-into-curl_easy_setopt-CURLOPT_NOSIG.patch building: pass 1L into curl_easy_setopt(CURLOPT_NOSIGNAL)
should make curl 8.14.1 happy

Internally the value is read from the stack using va_arg(long)

see #2319 libreswan-5.2 doesn't compile with curl 8.14.1		 Andrew Cagney <cagney@gnu.org> no 2025-06-24
0001-crypto-in-RSA_authenticate_hash_signature_raw_rsa-us.patch crypto: in RSA_authenticate_hash_signature_raw_rsa() use PK11_Verify() Andrew Cagney <cagney@gnu.org> no 2026-04-09
0002-crypto-in-RSA_authenticate_hash_signature_pkcs1_1_5_.patch crypto: in RSA_authenticate_hash_signature_pkcs1_1_5_rsa() use VFY_VerifyDigestDirect() Andrew Cagney <cagney@gnu.org> no 2026-04-10
0003-Fix-for-CVE-2026-12413.patch Fix for CVE-2026-12413 Paul Wouters <paul.wouters@aiven.io> no 2026-06-16
0004-Fix-compilation-error-on-Fedora-44.patch Fix compilation error on Fedora 44
On Fedora 44, where -Wunused-but-set-variable is enabled with GCC 16,
the build fails with:

ikev2_proposals.c: In function ‘process_transforms’:
ikev2_proposals.c:453:46: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
453 | const struct ikev2_proposal *local_proposal;
| ^~~~~~~~~~~~~~
ikev2_proposals.c:773:32: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
773 | struct ikev2_proposal *local_proposal;
| ^~~~~~~~~~~~~~
cc1: all warnings being treated as errors

This fixes it by adding the UNUSED attribute to the local variable.		 Daiki Ueno <dueno@redhat.com> no 2026-01-29
0005-x509-tighten-nss_compat-BER-check.patch x509: tighten nss_compat BER check Andrew Cagney <cagney@gnu.org> no 2026-07-09
0006-ikev2-check-the-cert-s-pubkey-unpacked-before-using-.patch ikev2: check the cert's pubkey unpacked before using it - cve-2026-14957 Andrew Cagney <cagney@gnu.org> no 2026-07-09

All known versions for source package 'libreswan'

Links