diff --git a/website/content/en/releases/14.4R/errata.adoc b/website/content/en/releases/14.4R/errata.adoc
index 40f7a0de37..4deb8fb462 100644
--- a/website/content/en/releases/14.4R/errata.adoc
+++ b/website/content/en/releases/14.4R/errata.adoc
@@ -1,132 +1,134 @@
 ---
 title: "FreeBSD 14.4-RELEASE Errata"
 sidenav: download
 ---
 
 :release: 14.4-RELEASE
 :releaseNext: 14.5-RELEASE
 :releaseBranch: 14-STABLE
 
 = FreeBSD {release} Errata
 
 == Abstract
 
 This document lists errata items for FreeBSD {release}, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation.
 This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability.
 An up-to-date version of this document should always be consulted before installing this version of FreeBSD.
 
 This errata document for FreeBSD {release} will be maintained until the release of FreeBSD {releaseNext}.
 
 == Table of Contents
 
 * <<intro,Introduction>>
 * <<security,Security Advisories>>
 * <<errata,Errata Notices>>
 * <<open-issues,Open Issues>>
 * <<late-news,Late-Breaking News>>
 
 [[intro]]
 == Introduction
 
 This errata document contains "late-breaking news" about FreeBSD {release}.
 Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
 
 Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the "current errata" for this release.
 These other copies of the errata are located at https://www.FreeBSD.org/releases/, plus any sites which keep up-to-date mirrors of this location.
 
 Source and binary snapshots of FreeBSD {releaseBranch} also contain up-to-date copies of this document (as of the time of the snapshot).
 
 For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/security/.
 
 [[security]]
 == Security Advisories
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Advisory |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:06.tcp.asc[FreeBSD-SA-26:06.tcp] |26 March 2026 |TCP: remotely exploitable DoS vector (mbuf leak)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:08.rpcsec_gss.asc[FreeBSD-SA-26:08.rpcsec_gss] |26 March 2026 |Remote code execution via RPCSEC_GSS packet validation
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:09.pf.asc[FreeBSD-SA-26:09.pf] |26 March 2026 |pf silently ignores certain rules
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:10.tty.asc[FreeBSD-SA-26:10.tty] |21 April 2026 |Kernel use-after-free bug in the TIOCNOTTY handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:11.amd64.asc[FreeBSD-SA-26:11.amd64] |21 April 2026 |Missing large page handling in pmap_pkru_update_range()
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:12.dhclient.asc[FreeBSD-SA-26:12.dhclient] |29 April 2026 |Remote code execution via malicious DHCP options
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:13.exec.asc[FreeBSD-SA-26:13.exec] |29 April 2026 |Local privilege escalation via execve()
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:14.pf.asc[FreeBSD-SA-26:14.pf] |29 April 2026 |pf can overflow the stack parsing crafted SCTP packets
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:15.dhclient.asc[FreeBSD-SA-26:15.dhclient] |29 April 2026 |Remotely triggerable out-of-bounds heap write in dhclient
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:16.libnv.asc[FreeBSD-SA-26:16.libnv] |29 April 2026 |Stack overflow via select() file descriptor set overflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:17.libnv.asc[FreeBSD-SA-26:17.libnv] |29 April 2026 |Heap overflow in libnv
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:18.setcred.asc[FreeBSD-SA-26:18.setcred] |20 May 2026 |Stack buffer overflow via setcred(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:19.file.asc[FreeBSD-SA-26:19.file] |20 May 2026 |Kernel use-after-free via file descriptor syscalls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:20.fusefs.asc[FreeBSD-SA-26:20.fusefs] |20 May 2026 |Heap overflow in FUSE_LISTXATTR
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:21.ptrace.asc[FreeBSD-SA-26:21.ptrace] |20 May 2026 |Missing validation in ptrace(PT_SC_REMOTE)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:22.libcasper.asc[FreeBSD-SA-26:22.libcasper] |20 May 2026 |select(2) file descriptor set overflow causes stack overflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:23.bsdinstall.asc[FreeBSD-SA-26:23.bsdinstall] |20 May 2026 |Remote code execution via installer Wi-Fi access point scans
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:24.cap_net.asc[FreeBSD-SA-26:24.cap_net] |20 May 2026 |Incorrect libcap_net limitation list manipulation
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:25.thr.asc[FreeBSD-SA-26:25.thr] |9 June 2026 |Missing permission check in thr_kill2(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:26.ktls.asc[FreeBSD-SA-26:26.ktls] |9 June 2026 |Arbitrary file overwrite via the KTLS receive path
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:27.sound.asc[FreeBSD-SA-26:27.sound] |9 June 2026 |Multiple vulnerabilities in the sound(4) mmap path
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:28.capsicum.asc[FreeBSD-SA-26:28.capsicum] |9 June 2026 |sigqueue(2) missing capability mode restriction
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:29.ip6_multicast.asc[FreeBSD-SA-26:29.ip6_multicast] |9 June 2026 |Use-after-free bug in the IPV6_MSFILTER socket option handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:30.linux.asc[FreeBSD-SA-26:30.linux] |9 June 2026 |Flaw in Linuxulator execution of setugid binaries
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:31.arm64.asc[FreeBSD-SA-26:31.arm64] |9 June 2026 |Arm CPU errata may bypass page table permission changes
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:32.elf.asc[FreeBSD-SA-26:32.elf] |9 June 2026 |ASLR bypass for setuid executables via procctl(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:33.unbound.asc[FreeBSD-SA-26:33.unbound] |9 June 2026 |Multiple vulnerabilities in unbound
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:34.vt.asc[FreeBSD-SA-26:34.vt] |9 June 2026 |Integer overflow in vt(4) CONS_HISTORY ioctl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:35.openssl.asc[FreeBSD-SA-26:35.openssl] |9 June 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:36.ldns.asc[FreeBSD-SA-26:36.ldns] |9 June 2026 |Insufficient response validation in the ldns stub resolver
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:37.vm.asc[FreeBSD-SA-26:37.vm] |30 June 2026 |Use-after-free in device pager page list
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:39.execve.asc[FreeBSD-SA-26:39.execve] |30 June 2026 |Local privilege escalation via execve(2) TOCTOU race
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:40.zfs.asc[FreeBSD-SA-26:40.zfs] |30 June 2026 |Multiple vulnerabilities in OpenZFS
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:41.libalias.asc[FreeBSD-SA-26:41.libalias] |30 June 2026 |Buffer overflow in libalias RTSP handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:42.unlinkat.asc[FreeBSD-SA-26:42.unlinkat] |30 June 2026 |unlinkat(2) ignores AT_RESOLVE_BENEATH flag
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:43.tcp.asc[FreeBSD-SA-26:43.tcp] |30 June 2026 |Use-after-free in TCP RACK stack option handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:44.posixshm.asc[FreeBSD-SA-26:44.posixshm] |30 June 2026 |Multiple vulnerabilities in POSIX largepage objects
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:45.audit.asc[FreeBSD-SA-26:45.audit] |30 June 2026 |Incorrect audit records for ptrace(2) syscall requests
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:46.ktls.asc[FreeBSD-SA-26:46.ktls] |30 June 2026 |Remote DOS via uninitialized memory access in KTLS receive
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:47.linux.asc[FreeBSD-SA-26:47.linux] |30 June 2026 |Kernel stack disclosure in Linux compatibility layer
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:48.compat32.asc[FreeBSD-SA-26:48.compat32] |30 June 2026 |Kernel stack disclosure in 32-bit compatibility support
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc[FreeBSD-SA-26:56.hwpmc] |25 August 2026 |hwpmc fails to detach PMCs during exec credential transitions
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:58.sound.asc[FreeBSD-SA-26:58.sound] |25 August 2026 |Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:60.ppp.asc[FreeBSD-SA-26:60.ppp] |25 August 2026 |Multiple vulnerabilities in ppp(8)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
 |===
 
 [[errata]]
 == Errata Notices
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Errata |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:05.vm.asc[FreeBSD-EN-26:05.vm] |21 April 2026 |The page fault handler fails to zero memory
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:06.timerfd.asc[FreeBSD-EN-26:06.timerfd] |21 April 2026 |Periodic timerfd(2) timers may produce incorrect results
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:09.tzdata.asc[FreeBSD-EN-26:09.tzdata] |29 April 2026 |Timezone database information update
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:10.amd64.asc[FreeBSD-EN-26:10.amd64] |29 April 2026 |TLB invalidation bug on AMD systems with INVLPGB
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:11.dhclient.asc[FreeBSD-EN-26:11.dhclient] |1 May 2026 |dhclient(8) lease validation is too strict
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:12.freebsd-update.asc[FreeBSD-EN-26:12.freebsd-update] |1 May 2026 |Source inconsistency between freebsd-update, EN/SAs, and git
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:13.freebsd-update.asc[FreeBSD-EN-26:13.freebsd-update] |20 May 2026 |freebsd-update attempts to merge a generated file
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:15.openssl.asc[FreeBSD-EN-26:15.openssl] |9 June 2026 |Update OpenSSL to 3.0.20 and 3.5.6
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:16.arm64.asc[FreeBSD-EN-26:16.arm64] |30 June 2026 |32-bit setcontext(2) and swapcontext(2) fail on arm64
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:18.tzdata.asc[FreeBSD-EN-26:18.tzdata] |29 July 2026 |Timezone database information update
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:20.microcode.asc[FreeBSD-EN-26:20.microcode] |25 August 2026 |Early loading of Intel CPU microcode fails for some CPUs
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:21.openssl.asc[FreeBSD-EN-26:21.openssl] |25 August 2026 |OpenSSL pkg-config files contain incorrect versions
 |===
 
 [[open-issues]]
 == Open Issues
 
 1. **man:freebsd-update[8]** commands such as `fetch` or `install` may hang when man:pkg[8] is not bootstrapped on the system. +
 **Workaround**: run man:pkg[8] to install the package management tool, then reuse man:freebsd-update[8]. +
 **State**: open - https://bugs.freebsd.org/293516 +
 
 2. **man:loader_lua[8]** A regression in the boot loader scripts causes the wrong kernel to be selected if /boot/kernel is a symlink. +
 **Workaround**: Disable automatic kernel detection by adding kernels_autodetect="NO" to [.filename]#/boot/loader.conf#. +
 **State**: fixed in main - https://bugs.freebsd.org/293654 +
 
 [[late-news]]
 == Late-Breaking News
 
 No late-breaking news.
diff --git a/website/content/en/releases/15.0R/errata.adoc b/website/content/en/releases/15.0R/errata.adoc
index afb5592150..62836781e4 100644
--- a/website/content/en/releases/15.0R/errata.adoc
+++ b/website/content/en/releases/15.0R/errata.adoc
@@ -1,166 +1,167 @@
 ---
 title: "FreeBSD 15.0-RELEASE Errata"
 sidenav: download
 ---
 
 :release: 15.0-RELEASE
 :releaseNext: 15.1-RELEASE
 :releaseBranch: 15-STABLE
 
 = FreeBSD {release} Errata
 
 == Abstract
 
 This document lists errata items for FreeBSD {release}, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation.
 This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability.
 An up-to-date version of this document should always be consulted before installing this version of FreeBSD.
 
 This errata document for FreeBSD {release} will be maintained until the release of FreeBSD {releaseNext}.
 
 == Table of Contents
 
 * <<intro,Introduction>>
 * <<security,Security Advisories>>
 * <<errata,Errata Notices>>
 * <<open-issues,Open Issues>>
 * <<late-news,Late-Breaking News>>
 
 [[intro]]
 == Introduction
 
 This errata document contains "late-breaking news" about FreeBSD {release}.
 Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
 
 Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the "current errata" for this release.
 These other copies of the errata are located at https://www.FreeBSD.org/releases/, plus any sites which keep up-to-date mirrors of this location.
 
 Source and binary snapshots of FreeBSD {releaseBranch} also contain up-to-date copies of this document (as of the time of the snapshot).
 
 For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/security/.
 
 [[security]]
 == Security Advisories
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Advisory |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc[FreeBSD-SA-25:12.rtsold] |16 December 2025 |Remote code execution via ND6 Router Advertisements
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:01.openssl.asc[FreeBSD-SA-26:01.openssl] |27 January 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:03.blocklistd.asc[FreeBSD-SA-26:03.blocklistd] |10 February 2026 |blocklistd(8) socket leak
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:05.route.asc[FreeBSD-SA-26:05.route] |24 February 2026 |Local DoS and possible privilege escalation via routing sockets
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:06.tcp.asc[FreeBSD-SA-26:06.tcp] |26 March 2026 |TCP: remotely exploitable DoS vector (mbuf leak)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:07.nvmf.asc[FreeBSD-SA-26:07.nvmf] |26 March 2026 |Remote denial of service via null pointer dereference
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:08.rpcsec_gss.asc[FreeBSD-SA-26:08.rpcsec_gss] |26 March 2026 |Remote code execution via RPCSEC_GSS packet validation
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:09.pf.asc[FreeBSD-SA-26:09.pf] |26 March 2026 |pf silently ignores certain rules
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:10.tty.asc[FreeBSD-SA-26:10.tty] |21 April 2026 |Kernel use-after-free bug in the TIOCNOTTY handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:11.amd64.asc[FreeBSD-SA-26:11.amd64] |21 April 2026 |Missing large page handling in pmap_pkru_update_range()
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:12.dhclient.asc[FreeBSD-SA-26:12.dhclient] |29 April 2026 |Remote code execution via malicious DHCP options
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:13.exec.asc[FreeBSD-SA-26:13.exec] |29 April 2026 |Local privilege escalation via execve()
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:14.pf.asc[FreeBSD-SA-26:14.pf] |29 April 2026 |pf can overflow the stack parsing crafted SCTP packets
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:15.dhclient.asc[FreeBSD-SA-26:15.dhclient] |29 April 2026 |Remotely triggerable out-of-bounds heap write in dhclient
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:16.libnv.asc[FreeBSD-SA-26:16.libnv] |29 April 2026 |Stack overflow via select() file descriptor set overflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:17.libnv.asc[FreeBSD-SA-26:17.libnv] |29 April 2026 |Heap overflow in libnv
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:18.setcred.asc[FreeBSD-SA-26:18.setcred] |20 May 2026 |Stack buffer overflow via setcred(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:19.file.asc[FreeBSD-SA-26:19.file] |20 May 2026 |Kernel use-after-free via file descriptor syscalls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:20.fusefs.asc[FreeBSD-SA-26:20.fusefs] |20 May 2026 |Heap overflow in FUSE_LISTXATTR
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:21.ptrace.asc[FreeBSD-SA-26:21.ptrace] |20 May 2026 |Missing validation in ptrace(PT_SC_REMOTE)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:22.libcasper.asc[FreeBSD-SA-26:22.libcasper] |20 May 2026 |select(2) file descriptor set overflow causes stack overflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:23.bsdinstall.asc[FreeBSD-SA-26:23.bsdinstall] |20 May 2026 |Remote code execution via installer Wi-Fi access point scans
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:24.cap_net.asc[FreeBSD-SA-26:24.cap_net] |20 May 2026 |Incorrect libcap_net limitation list manipulation
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:25.thr.asc[FreeBSD-SA-26:25.thr] |9 June 2026 |Missing permission check in thr_kill2(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:26.ktls.asc[FreeBSD-SA-26:26.ktls] |9 June 2026 |Arbitrary file overwrite via the KTLS receive path
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:27.sound.asc[FreeBSD-SA-26:27.sound] |9 June 2026 |Multiple vulnerabilities in the sound(4) mmap path
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:28.capsicum.asc[FreeBSD-SA-26:28.capsicum] |9 June 2026 |sigqueue(2) missing capability mode restriction
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:29.ip6_multicast.asc[FreeBSD-SA-26:29.ip6_multicast] |9 June 2026 |Use-after-free bug in the IPV6_MSFILTER socket option handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:30.linux.asc[FreeBSD-SA-26:30.linux] |9 June 2026 |Flaw in Linuxulator execution of setugid binaries
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:31.arm64.asc[FreeBSD-SA-26:31.arm64] |9 June 2026 |Arm CPU errata may bypass page table permission changes
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:32.elf.asc[FreeBSD-SA-26:32.elf] |9 June 2026 |ASLR bypass for setuid executables via procctl(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:33.unbound.asc[FreeBSD-SA-26:33.unbound] |9 June 2026 |Multiple vulnerabilities in unbound
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:34.vt.asc[FreeBSD-SA-26:34.vt] |9 June 2026 |Integer overflow in vt(4) CONS_HISTORY ioctl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:35.openssl.asc[FreeBSD-SA-26:35.openssl] |9 June 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:36.ldns.asc[FreeBSD-SA-26:36.ldns] |9 June 2026 |Insufficient response validation in the ldns stub resolver
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:37.vm.asc[FreeBSD-SA-26:37.vm] |30 June 2026 |Use-after-free in device pager page list
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:38.jail.asc[FreeBSD-SA-26:38.jail] |30 June 2026 |Jail reference count underflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:39.execve.asc[FreeBSD-SA-26:39.execve] |30 June 2026 |Local privilege escalation via execve(2) TOCTOU race
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:40.zfs.asc[FreeBSD-SA-26:40.zfs] |30 June 2026 |Multiple vulnerabilities in OpenZFS
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:41.libalias.asc[FreeBSD-SA-26:41.libalias] |30 June 2026 |Buffer overflow in libalias RTSP handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:42.unlinkat.asc[FreeBSD-SA-26:42.unlinkat] |30 June 2026 |unlinkat(2) ignores AT_RESOLVE_BENEATH flag
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:43.tcp.asc[FreeBSD-SA-26:43.tcp] |30 June 2026 |Use-after-free in TCP RACK stack option handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:44.posixshm.asc[FreeBSD-SA-26:44.posixshm] |30 June 2026 |Multiple vulnerabilities in POSIX largepage objects
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:45.audit.asc[FreeBSD-SA-26:45.audit] |30 June 2026 |Incorrect audit records for ptrace(2) syscall requests
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:46.ktls.asc[FreeBSD-SA-26:46.ktls] |30 June 2026 |Remote DOS via uninitialized memory access in KTLS receive
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:47.linux.asc[FreeBSD-SA-26:47.linux] |30 June 2026 |Kernel stack disclosure in Linux compatibility layer
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:48.compat32.asc[FreeBSD-SA-26:48.compat32] |30 June 2026 |Kernel stack disclosure in 32-bit compatibility support
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc[FreeBSD-SA-26:50.kqueue] |UNKNOWN |Use-after-free in kqueue copy-on-fork
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc[FreeBSD-SA-26:51.ktimer] |29 July 2026 |Kernel stack disclosure via timer_settime(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc[FreeBSD-SA-26:53.ktrace] |29 July 2026 |ktrace(2) privilege incorrectly validated in jails
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc[FreeBSD-SA-26:56.hwpmc] |25 August 2026 |hwpmc fails to detach PMCs during exec credential transitions
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:57.unix.asc[FreeBSD-SA-26:57.unix] |25 August 2026 |Use-after-free in unix SOCK_STREAM message handling
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:58.sound.asc[FreeBSD-SA-26:58.sound] |25 August 2026 |Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:59.mac_do.asc[FreeBSD-SA-26:59.mac_do] |25 August 2026 |Unauthorized credential switching
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:60.ppp.asc[FreeBSD-SA-26:60.ppp] |25 August 2026 |Multiple vulnerabilities in ppp(8)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
 |===
 
 [[errata]]
 == Errata Notices
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Errata |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-25:19.zfs.asc[FreeBSD-EN-25:19.zfs] |16 December 2025 |Unprivileged kernel NULL pointer dereference
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-25:20.vmm.asc[FreeBSD-EN-25:20.vmm] |16 December 2025 |bhyve(8) PCI passthru regression
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:01.devinfo.asc[FreeBSD-EN-26:01.devinfo] |27 January 2026 |devinfo output formatting regression
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:02.arm64.asc[FreeBSD-EN-26:02.arm64] |27 January 2026 |arm64 SVE signal context misalignment
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:03.vm.asc[FreeBSD-EN-26:03.vm] |27 January 2026 |The page fault handler fails to zero memory
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:04.arm64.asc[FreeBSD-EN-26:04.arm64] |10 February 2026 |Kernel panic when dumping process core on arm64
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:05.vm.asc[FreeBSD-EN-26:05.vm] |21 April 2026 |The page fault handler fails to zero memory
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:06.timerfd.asc[FreeBSD-EN-26:06.timerfd] |21 April 2026 |Periodic timerfd(2) timers may produce incorrect results
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:07.pkgbase.asc[FreeBSD-EN-26:07.pkgbase] |21 April 2026 |Base packages fail to build with newer versions of libucl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:08.pf.asc[FreeBSD-EN-26:08.pf] |29 April 2026 |Incorrect duplicate rule detection for automatic tables
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:09.tzdata.asc[FreeBSD-EN-26:09.tzdata] |29 April 2026 |Timezone database information update
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:10.amd64.asc[FreeBSD-EN-26:10.amd64] |29 April 2026 |TLB invalidation bug on AMD systems with INVLPGB
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:11.dhclient.asc[FreeBSD-EN-26:11.dhclient] |1 May 2026 |dhclient(8) lease validation is too strict
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:12.freebsd-update.asc[FreeBSD-EN-26:12.freebsd-update] |1 May 2026 |Source inconsistency between freebsd-update, EN/SAs, and git
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:13.freebsd-update.asc[FreeBSD-EN-26:13.freebsd-update] |20 May 2026 |freebsd-update attempts to merge a generated file
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:14.syslogd.asc[FreeBSD-EN-26:14.syslogd] |9 June 2026 |syslogd(8) memory leak in casper_ttymsg()
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:15.openssl.asc[FreeBSD-EN-26:15.openssl] |9 June 2026 |Update OpenSSL to 3.0.20 and 3.5.6
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:16.arm64.asc[FreeBSD-EN-26:16.arm64] |30 June 2026 |32-bit setcontext(2) and swapcontext(2) fail on arm64
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:17.rpcsec_tls.asc[FreeBSD-EN-26:17.rpcsec_tls] |30 June 2026 |Socket refcount underflow in the NFS server
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:18.tzdata.asc[FreeBSD-EN-26:18.tzdata] |29 July 2026 |Timezone database information update
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:19.zfs.asc[FreeBSD-EN-26:19.zfs] |29 July 2026 |Race conditions in zvol device management
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:20.microcode.asc[FreeBSD-EN-26:20.microcode] |25 August 2026 |Early loading of Intel CPU microcode fails for some CPUs
 |===
 
 [[open-issues]]
 == Open Issues
 
 1. **man:ipfw[8]** denies networking when booting a 15.0 kernel with 14.3 userland +
 **Workaround**: disable man:ipfw[8] or upgrade completely before rebooting man:ipfw[8] systems +
 **State**: open - https://bugs.freebsd.org/291562 +
 
 2. **man:devinfo[8]** output format accidentally changed +
 **Workaround**: users parsing man:devinfo[8] must build it from a newer source +
 **State**: reverted in FreeBSD 15.0-RELEASE-p2 -  https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:01.devinfo.asc +
 
 3. **man:pkgbase[7]** system upgrading from 14.3 to 15.0 is not supported +
 **Workaround**: systems installed with man:pkgbase[7] must backup and reinstall +
 **State**: works as intended, man:pkgbase[7] is an experimental preview +
 
 4. **FreeBSD/powerpc** images do not boot on Apple G5 systems +
 **Workaround**: do not install this release on Apple G5 systems +
 **State**: fixed in main - https://bugs.freebsd.org/292341 +
 
 5. **man:loader.efi[8]** has a regression preventing boot on some systems with remote serial console facilities including HPE systems +
 **Workaround**: unset `hw.uart.console` at the man:loader[8] prompt if it hangs and/or instant reboots when loading the kernel +
 **State**: fixed in main - https://bugs.freebsd.org/291461 +
 
 [[late-news]]
 == Late-Breaking News
 
 No late-breaking news.
diff --git a/website/content/en/releases/15.1R/errata.adoc b/website/content/en/releases/15.1R/errata.adoc
index 4711f9921b..0420f0ae4b 100644
--- a/website/content/en/releases/15.1R/errata.adoc
+++ b/website/content/en/releases/15.1R/errata.adoc
@@ -1,100 +1,101 @@
 ---
 title: "FreeBSD 15.1-RELEASE Errata"
 sidenav: download
 ---
 
 :release: 15.1-RELEASE
 :releaseNext: 15.2-RELEASE
 :releaseBranch: 15-STABLE
 
 = FreeBSD {release} Errata
 
 == Abstract
 
 This document lists errata items for FreeBSD {release}, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation.
 This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability.
 An up-to-date version of this document should always be consulted before installing this version of FreeBSD.
 
 This errata document for FreeBSD {release} will be maintained until the release of FreeBSD {releaseNext}.
 
 == Table of Contents
 
 * <<intro,Introduction>>
 * <<security,Security Advisories>>
 * <<errata,Errata Notices>>
 * <<open-issues,Open Issues>>
 * <<late-news,Late-Breaking News>>
 
 [[intro]]
 == Introduction
 
 This errata document contains "late-breaking news" about FreeBSD {release}.
 Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
 
 Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the "current errata" for this release.
 These other copies of the errata are located at https://www.FreeBSD.org/releases/, plus any sites which keep up-to-date mirrors of this location.
 
 Source and binary snapshots of FreeBSD {releaseBranch} also contain up-to-date copies of this document (as of the time of the snapshot).
 
 For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/security/.
 
 [[security]]
 == Security Advisories
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Advisory |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:37.vm.asc[FreeBSD-SA-26:37.vm] |30 June 2026 |Use-after-free in device pager page list
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:38.jail.asc[FreeBSD-SA-26:38.jail] |30 June 2026 |Jail reference count underflow
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:39.execve.asc[FreeBSD-SA-26:39.execve] |30 June 2026 |Local privilege escalation via execve(2) TOCTOU race
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:40.zfs.asc[FreeBSD-SA-26:40.zfs] |30 June 2026 |Multiple vulnerabilities in OpenZFS
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:41.libalias.asc[FreeBSD-SA-26:41.libalias] |30 June 2026 |Buffer overflow in libalias RTSP handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:42.unlinkat.asc[FreeBSD-SA-26:42.unlinkat] |30 June 2026 |unlinkat(2) ignores AT_RESOLVE_BENEATH flag
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:43.tcp.asc[FreeBSD-SA-26:43.tcp] |30 June 2026 |Use-after-free in TCP RACK stack option handler
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:44.posixshm.asc[FreeBSD-SA-26:44.posixshm] |30 June 2026 |Multiple vulnerabilities in POSIX largepage objects
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:45.audit.asc[FreeBSD-SA-26:45.audit] |30 June 2026 |Incorrect audit records for ptrace(2) syscall requests
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:46.ktls.asc[FreeBSD-SA-26:46.ktls] |30 June 2026 |Remote DOS via uninitialized memory access in KTLS receive
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc[FreeBSD-SA-26:50.kqueue] |29 July 2026 |Use-after-free in kqueue copy-on-fork
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc[FreeBSD-SA-26:51.ktimer] |29 July 2026 |Kernel stack disclosure via timer_settime(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc[FreeBSD-SA-26:53.ktrace] |29 July 2026 |ktrace(2) privilege incorrectly validated in jails
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc[FreeBSD-SA-26:56.hwpmc] |25 August 2026 |hwpmc fails to detach PMCs during exec credential transitions
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:57.unix.asc[FreeBSD-SA-26:57.unix] |25 August 2026 |Use-after-free in unix SOCK_STREAM message handling
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:58.sound.asc[FreeBSD-SA-26:58.sound] |25 August 2026 |Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:59.mac_do.asc[FreeBSD-SA-26:59.mac_do] |25 August 2026 |Unauthorized credential switching
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:60.ppp.asc[FreeBSD-SA-26:60.ppp] |25 August 2026 |Multiple vulnerabilities in ppp(8)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
 |===
 
 [[errata]]
 == Errata Notices
 
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Errata |Date |Topic
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:16.arm64.asc[FreeBSD-EN-26:16.arm64] |30 June 2026 |32-bit setcontext(2) and swapcontext(2) fail on arm64
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:17.rpcsec_tls.asc[FreeBSD-EN-26:17.rpcsec_tls] |30 June 2026 |Socket refcount underflow in the NFS server
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:18.tzdata.asc[FreeBSD-EN-26:18.tzdata] |29 July 2026 |Timezone database information update
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:19.zfs.asc[FreeBSD-EN-26:19.zfs] |29 July 2026 |Race conditions in zvol device management
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-26:20.microcode.asc[FreeBSD-EN-26:20.microcode] |25 August 2026 |Early loading of Intel CPU microcode fails for some CPUs
 |===
 
 [[open-issues]]
 == Open Issues
 
 1. The **man:nfs[4]** client may cause a kernel panic when an NFSv4.1 or NFSv4.2 server becomes unresponsive or reboots. The system will automatically reboot after the panic. +
 **Workaround**: Avoid using `soft` or `intr` mount options with NFSv4.1/4.2 mounts. If the panic occurs frequently, consider downgrading to NFSv3 until a patched version is available. +
 **State**: Fixed in {releaseBranch} after 26 June 2026 - https://bugs.freebsd.org/294925
 
 2. Systems with **man:zfs[4]** encrypted pools with `keylocation=prompt` datasets may stall waiting for a passphrase on boot if the `zfskeys` **man:rc[8]** script is enabled, diverging from previous behavior where mounting them would be skipped. +
 **Workaround**: Use `zpool set cachefile=none <pool>` so that the pool is not imported at boot. +
 **State**: Fixed in {releaseBranch} after 24 August 2026 - https://bugs.freebsd.org/296130
 
 [[late-news]]
 == Late-Breaking News
 
 No late-breaking news.