BSD Ports

wip/libreswan 5.4.1 NetBSD

Internet Key Exchange Daemon for managing IPsec

System
NetBSD
Repository
pkgsrc-wip
Maintainer
[email protected]
Last update
Commit
0cff3f8937
License
gnu-gpl-v2
Categories
wip, security

Description

Libreswan is an Internet Key Exchange (IKE) daemon for managing IPsec.

Libreswan supports IKEv1 and IKEv2 and has support for most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and many others.

On NetBSD and FreeBSD, Libreswan uses the PF_KEY_V2 IPsec stack. On Linux, Libreswan uses the XFRM IPsec stack.

Libreswan was forked from Openswan 2.6.38, which was forked from FreeS/WAN 2.04. See the CREDITS files for contributor acknowledgments.

In the other systems

SystemPortVersion
NetBSDwip/libreswan5.4.1
FreeBSDsecurity/libreswan4.12_3
HardenedBSDsecurity/libreswan4.12_3
GhostBSDsecurity/libreswan4.12_3

Install

From pkgsrc-wip (no binary package):

cd /usr/pkgsrc/wip/libreswan && make install clean

Dependencies

Run dependencies 5

No port depends on this one.

Commit history 2

DateCommitCreditsLog message
0cff3f8937 Andrew Cagney libreswan: upgrade 5.3.2 -> 5.4.1
v5.4.1 (Oct 5, 2026) * Security - fix CVE-2026-77206 - NPE - unexpected-eap-packet http://libreswan.org/security/CVE-2026-77206 [Claude and Ada Logics, David Korczynski, Andrew] - fix CVE-2026-77207 - NPE - empty-pkcs7-payload http://libreswan.org/security/CVE-2026-77207 [Claude and Ada Logics, David Korczynski, Andrew] - fix CVE-2026-94453 - UAF - EOF in IKETCP http://libreswan.org/security/CVE-2026-94453 [Vlad Miu, Andrew] - disable dns-match-id,=, - UAF [#3071 Vlad Miu, Andrew] * Linux: - allow connect(ADDR/UDP/0) [#3042 Tuomo, Antony, Andrew] * Testing: - add test for CVE-2026-77205 - DOS - fips-cert-leak http://libreswan.org/security/CVE-2026-77205 [Wojciech Tatarski (TuxCare), Andrew] * Building - fix NetBSD 11.0 v5.4 (August 13, 2026) …
04c6ec8438 Andrew Cagney libreswan: bump to 5.3.2
v5.3.2 (July 15, 2026) * Security: Fixes http://libreswan.org/security/CVE-2026-14957 * x509: tighten nss_compat BER check [Andrew]