I'm running this set of diffs on a couple of gateways and haven't
seen problems yet:

20260422: isakmpd(8): Validate proposal and transform sizes
20260422: isakmpd: Validate DELETE payload SPI array size 1/2
20260422: isakmpd: Validate DELETE payload SPI array size 2/2
20260422: isakmpd: Fix possible unaligned 32 bit read
20260608: isakmpd: Fix NULL dereference in message_alloc_reply() callers

Diffs make sense to me (I am not super familiar with the code though).
ok sthen, fwiw.