!83 [sync] PR-81: Update to 4.15 for fix CVE-2024-3652

From: @openeuler-sync-bot 
Reviewed-by: @wu-leilei 
Signed-off-by: @wu-leilei

libreswan.spec

@@ -1,4 +1,4 @@
-%global nss_version 3.44.0-8
+%global nss_version 3.52
 %global unbound_version 1.6.6
 %global libreswan_config \\\
     SHELL_BINARY=/usr/bin/sh \\\
@@ -18,16 +18,16 @@
     USE_LINUX_AUDIT=true \\\
     USE_NM=true \\\
     USE_SECCOMP=true \\\
-    USE_XAUTHPAM=true \\\
+    USE_AUTHPAM=true \\\
     USE_NSS_KDF=true \\\
 %{nil}
 
 
 Name: libreswan
 Summary: IKE implementation for IPsec with IKEv1 and IKEv2 support
-Version: 4.1
+Version: 4.15
 Release: 1
-License: GPLv2
+License: GPL-2.0-only
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{name}-%{version}.tar.gz
 Source1: https://download.libreswan.org/cavs/ikev1_dsa.fax.bz2
@@ -35,6 +35,7 @@ Source2: https://download.libreswan.org/cavs/ikev1_psk.fax.bz2
 Source3: https://download.libreswan.org/cavs/ikev2.fax.bz2
 Source4: openeuler-libreswan-sysctl.conf
 
+
 BuildRequires: audit-libs-devel
 BuildRequires: bison
 BuildRequires: curl-devel
@@ -91,7 +92,7 @@ Summary:    Help documents for libreswan
 Man pages and other related help documents for libreswan.
 
 %prep
-%setup -q -n libreswan-%{version}%{?prever}
+%autosetup -n libreswan-%{version}%{?prever} -p1
 
 sed -i "s/-lfreebl //" mk/config.mk
 
@@ -103,6 +104,9 @@ sed -i '/config setup/a\\t# Specifies a directory forNSS database files\n\tnssdi
 
 sed -i '/ipsec --checknss/s/$/ --nssdir \/etc\/ipsec.d/' ./initsystems/systemd/ipsec.service.in
 
+linux_variant=`sed -n -e 's/"//g' -e 's/^ID_LIKE=//p' -e 's/^ID=//p' /etc/os-release|tr '\n' ' ' && echo`
+sed -i "s/filter fedora/filter fedora $linux_variant/" mk/defaults/linux.mk
+
 %build
 make %{?_smp_mflags} \
     OPTIMIZE_CFLAGS="%{optflags}" \
@@ -177,6 +181,7 @@ certutil -N -d sql:$tmpdir --empty-password
 %attr(0644,root,root) %{_unitdir}/ipsec.service
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/pluto
 %attr(0700,root,root) %dir %{_sharedstatedir}/ipsec/nss
+%config(noreplace) %{_sysconfdir}/logrotate.d/libreswan
 %{_sbindir}/ipsec
 %{_libexecdir}/ipsec
 
@@ -186,6 +191,24 @@ certutil -N -d sql:$tmpdir --empty-password
 %attr(0644,root,root) %doc %{_mandir}/*/*
 
 %changelog
+* Tue Apr 30 2024 wangkai <13474090681@163.com> - 4.15-1
+- Update to 4.15 for fix CVE-2024-3652
+
+* Tue Mar 12 2024 yaoxin <yao_xin001@hoperun.com> - 4.14-1
+- Upgrade to 4.14 for fix CVE-2024-2357
+
+* Sat Aug 12 2023 Funda Wang <fundawang@yeah.net> - 4.12-1
+- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
+
+* Wed Jun 14 2023 yangbo <yangbo1@xfusion.com> - 4.11-2
+- Fix '\n' of the linux_variant
+
+* Tue May 30 2023 wangkai <13474090681@163.com> - 4.11-1
+- Update to 4.11 for fix CVE-2023-30570
+
+* Wed Aug 11 2021 caodongxia <caodongxia@huawei.com> - 4.1-2
+- Fix algparse unknown option -d
+
 * Fri Dec 04 2020 lingsheng <lingsheng@huawei.com> - 4.1-1
 - Update to 4.1