Fixes CVE-2016-5391, see https://libreswan.org/security/CVE-2016-5391/CVE-2016-5391.txt
Fixes #15645. It complained about a missing header, so I added nss to buildInputs instead of just nssTools.