import NetworkManager-libreswan-1.2.22-4.el9_5

.NetworkManager-libreswan.checksum

-0c3c0de4da98eb80f921f5e619511ea9dce265be5ae8514d2a1985920a76677b
+b9818cd8d59a31d3beea9db8d68d3fb972df0ab8d2eb3c99401c1d7782345883

SPECS/NetworkManager-libreswan.spec

@@ -11,7 +11,7 @@
 
 %global real_version     1.2.22
 %global rpm_version      1.2.22
-%global release_version  1
+%global release_version  4
 
 %global real_version_major %(printf '%s' '%{real_version}' | sed -n 's/^\\([1-9][0-9]*\\.[1-9][0-9]*\\)\\.[1-9][0-9]*$/\\1/p')
 
@@ -28,6 +28,7 @@ URL:       http://www.gnome.org/projects/NetworkManager/
 Source0:   https://download.gnome.org/sources/NetworkManager-libreswan/%{real_version_major}/%{name}-%{real_version}.tar.xz
 
 # Patch1: 0001-some.patch
+Patch1: 0001-ipsec-conf-escaping-cve-2024-9050.patch
 
 BuildRequires: make
 BuildRequires:  gcc
@@ -129,6 +130,12 @@ rm -f %{buildroot}%{_libdir}/NetworkManager/lib*.la
 %endif
 
 %changelog
+* Thu Oct 03 2024 Lubomir Rintel <lkundrak@v3.sk> - 1.2.22-4
+- Unbreak validation of unknown keys
+
+* Wed Sep 25 2024 Lubomir Rintel <lkundrak@v3.sk> - 1.2.22-2
+- Fix improper escaping of Libreswan configuration (CVE-2024-9050)
+
 * Wed May 22 2024 Beniamino Galvani <bgalvani@redhat.com> - 1.2.22-1
 - Add IPv6 support (RHEL-21875)