[rpms/libreswan] rawhide: - Update to libreswan-5.3.1

[rpms/libreswan] rawhide: - Update to libreswan-5.3.1

[Paul Wouters]

            A new commit has been pushed.

            Repo   : rpms/libreswan
            Branch : rawhide
            Commit : dd19e5e90fb23971282e9eff21800507841cd515
            Author : Paul Wouters <paul.wouters@aiven.io>
            Date   : 2026-06-24T16:01:51-04:00
            Stats  : +6/-57 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/libreswan/c/dd19e5e90fb23971282e9eff21800507841cd515?branch=rawhide

            Log:
            - Update to libreswan-5.3.1

* Resolves: CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722

---
diff --git a/.gitignore b/.gitignore
index 1160f38..c44f1ee 100644
--- a/.gitignore
+++ b/.gitignore
@@ -68,3 +68,5 @@
 /libreswan-5.2.tar.gz.asc
 /libreswan-5.3.tar.gz
 /libreswan-5.3.tar.gz.asc
+/libreswan-5.3.1.tar.gz
+/libreswan-5.3.1.tar.gz.sig

diff --git a/libreswan-5.3-unused-but-set-variable.patch b/libreswan-5.3-unused-but-set-variable.patch
deleted file mode 100644
index a37d1ce..0000000
--- a/libreswan-5.3-unused-but-set-variable.patch
+++ /dev/null
@@ -1,52 +0,0 @@
-From 75c3bb1663b13fce6cd20d0a160518156de6985a Mon Sep 17 00:00:00 2001
-From: Daiki Ueno <dueno@redhat.com>
-Date: Thu, 29 Jan 2026 11:34:17 +0900
-Subject: [PATCH] Fix compilation error on Fedora 44
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-On Fedora 44, where -Wunused-but-set-variable is enabled with GCC 16,
-the build fails with:
-
-  ikev2_proposals.c: In function ‘process_transforms’:
-  ikev2_proposals.c:453:46: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
-    453 |                 const struct ikev2_proposal *local_proposal;
-        |                                              ^~~~~~~~~~~~~~
-  ikev2_proposals.c:773:32: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
-    773 |         struct ikev2_proposal *local_proposal;
-        |                                ^~~~~~~~~~~~~~
-  cc1: all warnings being treated as errors
-
-This fixes it by adding the UNUSED attribute to the local variable.
-
-Signed-off-by: Daiki Ueno <dueno@redhat.com>
----
- programs/pluto/ikev2_proposals.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/programs/pluto/ikev2_proposals.c b/programs/pluto/ikev2_proposals.c
-index 6395fa58e2..a10fc37a10 100644
---- a/programs/pluto/ikev2_proposals.c
-+++ b/programs/pluto/ikev2_proposals.c
-@@ -440,7 +440,7 @@ static int process_transforms(struct pbs_in *prop_pbs, struct jambuf *remote_jam
- 	 */
- 	{
- 		int local_propnum;
--		const struct ikev2_proposal *local_proposal;
-+		const struct ikev2_proposal *local_proposal UNUSED;
- 		FOR_EACH_V2_PROPOSAL_IN_RANGE(local_propnum, local_proposal, local_proposals,
- 					      local_propnum_base, local_propnum_bound) {
- 			struct ikev2_proposal_match *matching_local_proposal = &matching_local_proposals[local_propnum];
-@@ -689,7 +689,7 @@ static int process_transforms(struct pbs_in *prop_pbs, struct jambuf *remote_jam
- 	}
- 
- 	int local_propnum;
--	struct ikev2_proposal *local_proposal;
-+	struct ikev2_proposal *local_proposal UNUSED;
- 	FOR_EACH_V2_PROPOSAL_IN_RANGE(local_propnum, local_proposal, local_proposals,
- 				      local_propnum_base, local_propnum_bound) {
- 		struct ikev2_proposal_match *matching_local_proposal = &matching_local_proposals[local_propnum];
--- 
-2.52.0
-

diff --git a/libreswan.spec b/libreswan.spec
index 522df13..e5f6864 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -30,14 +30,14 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 5.3
+Version: 5.3.1
 Release: %autorelease
 # The code in lib/libswan/nss_copies.c is under MPL-2.0, while the
 # rest is under GPL-2.0-or-later
 License: GPL-2.0-or-later AND MPL-2.0
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
-Source1: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz.asc
+Source1: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz.sig
 Source2: https://download.libreswan.org/LIBRESWAN-OpenPGP-KEY.txt
 %if 0%{with_cavstests}
 Source3: https://download.libreswan.org/cavs/ikev1_dsa.fax.bz2
@@ -46,7 +46,6 @@ Source5: https://download.libreswan.org/cavs/ikev2.fax.bz2
 %endif
 
 Patch1: libreswan-4.15-ipsec_import.patch
-Patch2: libreswan-5.3-unused-but-set-variable.patch
 
 BuildRequires: audit-libs-devel
 BuildRequires: bison

diff --git a/sources b/sources
index 3795022..f6187a3 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
-SHA512 (libreswan-5.3.tar.gz) = 338fb82a9969da8fa78f64ec9eda0e3dcd216d6b8333a6f966ba839e31d3eb5fdd94613f0fff934be16ff8d84f6f4265c8b35f37c642569e042f65a58038ba0d
-SHA512 (libreswan-5.3.tar.gz.asc) = b55d47abe69222f2b91b1fd48f5a6910a5469a4bea21fb7f3231ac036af378f94495405efdacb67eddf1fffa018f76db9c1944336bdedfb59f96a369e2362684
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
 SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e
+SHA512 (libreswan-5.3.1.tar.gz) = 862a49ca867e7fe429a8223da3f28b372c242b9e94e7944cf7cc9b38e10604b286f42a2ac296e2cf4cfbbdade219eaeca519d732ecbcbfc2596a841aecc8cd99
+SHA512 (libreswan-5.3.1.tar.gz.sig) = 649997212783efdf022b38a0256e41243a74bd8a3f3045c3718d2674d2756b9c7c614e260a0101b975376c97c64cd179598b7a659de4724c21bdcea75c7118b0