diff --git a/website/data/security/advisories.toml b/website/data/security/advisories.toml
index dfcfa583b1..ad0f58dfe3 100644
--- a/website/data/security/advisories.toml
+++ b/website/data/security/advisories.toml
@@ -1,2803 +1,2807 @@
 # Sort advisories by year, month and day
 # $FreeBSD$
 
+[[advisories]]
+name = "FreeBSD-SA-25:09.netinet"
+date = "2025-10-22"
+
 [[advisories]]
 name = "FreeBSD-SA-25:08.openssl"
 date = "2025-09-30"
 
 [[advisories]]
 name = "FreeBSD-SA-25:07.libarchive"
 date = "2025-08-08"
 
 [[advisories]]
 name = "FreeBSD-SA-25:06.xz"
 date = "2025-07-02"
 
 [[advisories]]
 name = "FreeBSD-SA-25:05.openssh"
 date = "2025-02-21"
 
 [[advisories]]
 name = "FreeBSD-SA-25:04.ktrace"
 date = "2025-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-25:03.etcupdate"
 date = "2025-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-25:02.fs"
 date = "2025-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-25:01.openssh"
 date = "2025-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-24:19.fetch"
 date = "2024-10-29"
 
 [[advisories]]
 name = "FreeBSD-SA-24:18.ctl"
 date = "2024-10-29"
 
 [[advisories]]
 name = "FreeBSD-SA-24:17.bhyve"
 date = "2024-10-29"
 
 [[advisories]]
 name = "FreeBSD-SA-24:16.libnv"
 date = "2024-09-19"
 
 [[advisories]]
 name = "FreeBSD-SA-24:15.bhyve"
 date = "2024-09-19"
 
 [[advisories]]
 name = "FreeBSD-SA-24:14.umtx"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:13.openssl"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:12.bhyve"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:11.ctl"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:10.bhyve"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:09.libnv"
 date = "2024-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-24:08.openssh"
 date = "2024-08-07"
 
 [[advisories]]
 name = "FreeBSD-SA-24:07.nfsclient"
 date = "2024-08-07"
 
 [[advisories]]
 name = "FreeBSD-SA-24:06.ktrace"
 date = "2024-08-07"
 
 [[advisories]]
 name = "FreeBSD-SA-24:05.pf"
 date = "2024-08-07"
 
 [[advisories]]
 name = "FreeBSD-SA-24:04.openssh"
 date = "2024-07-01"
 
 [[advisories]]
 name = "FreeBSD-SA-24:03.unbound"
 date = "2024-03-28"
 
 [[advisories]]
 name = "FreeBSD-SA-24:02.tty"
 date = "2024-02-14"
 
 [[advisories]]
 name = "FreeBSD-SA-24:01.bhyveload"
 date = "2024-02-14"
 
 [[advisories]]
 name = "FreeBSD-SA-23:19.openssh"
 date = "2023-12-19"
 
 [[advisories]]
 name = "FreeBSD-SA-23:18.nfsclient"
 date = "2023-12-12"
 
 [[advisories]]
 name = "FreeBSD-SA-23:17.pf"
 date = "2023-12-05"
 
 [[advisories]]
 name = "FreeBSD-SA-23:16.cap_net"
 date = "2023-11-08"
 
 [[advisories]]
 name = "FreeBSD-SA-23:15.stdio"
 date = "2023-11-08"
 
 [[advisories]]
 name = "FreeBSD-SA-23:14.smccc"
 date = "2023-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-23:13.capsicum"
 date = "2023-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-23:12.msdosfs"
 date = "2023-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-23:11.wifi"
 date = "2023-09-06"
 
 [[advisories]]
 name = "FreeBSD-SA-23:10.pf"
 date = "2023-09-06"
 
 [[advisories]]
 name = "FreeBSD-SA-23:09.pam_krb5"
 date = "2023-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-23:08.ssh"
 date = "2023-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-23:07.bhyve"
 date = "2023-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-23:06.ipv6"
 date = "2023-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-23:05.openssh"
 date = "2023-06-21"
 
 [[advisories]]
 name = "FreeBSD-SA-23:04.pam_krb5"
 date = "2023-06-21"
 
 [[advisories]]
 name = "FreeBSD-SA-23:03.openssl"
 date = "2023-02-16"
 
 [[advisories]]
 name = "FreeBSD-SA-23:02.openssh"
 date = "2023-02-16"
 
 [[advisories]]
 name = "FreeBSD-SA-23:01.geli"
 date = "2023-02-08"
 
 [[advisories]]
 name = "FreeBSD-SA-22:15.ping"
 date = "2022-11-29"
 
 [[advisories]]
 name = "FreeBSD-SA-22:14.heimdal"
 date = "2022-11-15"
 
 [[advisories]]
 name = "FreeBSD-SA-22:13.zlib"
 date = "2022-08-30"
 
 [[advisories]]
 name = "FreeBSD-SA-22:12.lib9p"
 date = "2022-08-09"
 
 [[advisories]]
 name = "FreeBSD-SA-22:11.vm"
 date = "2022-08-09"
 
 [[advisories]]
 name = "FreeBSD-SA-22:10.aio"
 date = "2022-08-09"
 
 [[advisories]]
 name = "FreeBSD-SA-22:09.elf"
 date = "2022-08-09"
 
 [[advisories]]
 name = "FreeBSD-SA-22:08.zlib"
 date = "2022-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-22:07.wifi_meshid"
 date = "2022-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-22:06.ioctl"
 date = "2022-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-22:05.bhyve"
 date = "2022-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-22:04.netmap"
 date = "2022-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-22:03.openssl"
 date = "2022-03-15"
 
 [[advisories]]
 name = "FreeBSD-SA-22:02.wifi"
 date = "2022-03-15"
 
 [[advisories]]
 name = "FreeBSD-SA-22:01.vt"
 date = "2022-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-21:17.openssl"
 date = "2021-08-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:16.openssl"
 date = "2021-08-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:15.libfetch"
 date = "2021-08-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:14.ggatec"
 date = "2021-08-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:13.bhyve"
 date = "2021-08-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:12.libradius"
 date = "2021-05-26"
 
 [[advisories]]
 name = "FreeBSD-SA-21:11.smap"
 date = "2021-05-26"
 
 [[advisories]]
 name = "FreeBSD-SA-21:10.jail_mount"
 date = "2021-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-21:09.accept_filter"
 date = "2021-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-21:08.vm"
 date = "2021-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-21:07.openssl"
 date = "2021-03-25"
 
 [[advisories]]
 name = "FreeBSD-SA-21:06.xen"
 date = "2021-02-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:05.jail_chdir"
 date = "2021-02-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:04.jail_remove"
 date = "2021-02-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:03.pam_login_access"
 date = "2021-02-24"
 
 [[advisories]]
 name = "FreeBSD-SA-21:02.xenoom"
 date = "2021-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-21:01.fsdisclosure"
 date = "2021-01-29"
 
 [[advisories]]
 name = "FreeBSD-SA-20:33.openssl"
 date = "2020-12-08"
 
 [[advisories]]
 name = "FreeBSD-SA-20:32.rtsold"
 date = "2020-12-01"
 
 [[advisories]]
 name = "FreeBSD-SA-20:31.icmp6"
 date = "2020-12-01"
 
 [[advisories]]
 name = "FreeBSD-SA-20:30.ftpd"
 date = "2020-09-15"
 
 [[advisories]]
 name = "FreeBSD-SA-20:29.bhyve_svm"
 date = "2020-09-15"
 
 [[advisories]]
 name = "FreeBSD-SA-20:28.bhyve_vmcs"
 date = "2020-09-15"
 
 [[advisories]]
 name = "FreeBSD-SA-20:27.ure"
 date = "2020-09-15"
 
 [[advisories]]
 name = "FreeBSD-SA-20:26.dhclient"
 date = "2020-09-02"
 
 [[advisories]]
 name = "FreeBSD-SA-20:25.sctp"
 date = "2020-09-02"
 
 [[advisories]]
 name = "FreeBSD-SA-20:24.ipv6"
 date = "2020-09-02"
 
 [[advisories]]
 name = "FreeBSD-SA-20:23.sendmsg"
 date = "2020-08-05"
 
 [[advisories]]
 name = "FreeBSD-SA-20:22.sqlite"
 date = "2020-08-05"
 
 [[advisories]]
 name = "FreeBSD-SA-20:21.usb_net"
 date = "2020-08-05"
 
 [[advisories]]
 name = "FreeBSD-SA-20:20.ipv6"
 date = "2020-07-08"
 
 [[advisories]]
 name = "FreeBSD-SA-20:19.unbound"
 date = "2020-07-08"
 
 [[advisories]]
 name = "FreeBSD-SA-20:18.posix_spawnp"
 date = "2020-07-08"
 
 [[advisories]]
 name = "FreeBSD-SA-20:17.usb"
 date = "2020-06-09"
 
 [[advisories]]
 name = "FreeBSD-SA-20:16.cryptodev"
 date = "2020-05-12"
 
 [[advisories]]
 name = "FreeBSD-SA-20:15.cryptodev"
 date = "2020-05-12"
 
 [[advisories]]
 name = "FreeBSD-SA-20:14.sctp"
 date = "2020-05-12"
 
 [[advisories]]
 name = "FreeBSD-SA-20:13.libalias"
 date = "2020-05-12"
 
 [[advisories]]
 name = "FreeBSD-SA-20:12.libalias"
 date = "2020-05-12"
 
 [[advisories]]
 name = "FreeBSD-SA-20:11.openssl"
 date = "2020-04-21"
 
 [[advisories]]
 name = "FreeBSD-SA-20:10.ipfw"
 date = "2020-04-21"
 
 [[advisories]]
 name = "FreeBSD-SA-20:09.ntp"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:08.jail"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:07.epair"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:06.if_ixl_ioctl"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:05.if_oce_ioctl"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:04.tcp"
 date = "2020-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-20:03.thrmisc"
 date = "2020-01-28"
 
 [[advisories]]
 name = "FreeBSD-SA-20:02.ipsec"
 date = "2020-01-28"
 
 [[advisories]]
 name = "FreeBSD-SA-20:01.libfetch"
 date = "2020-01-28"
 
 [[advisories]]
 name = "FreeBSD-SA-19:26.mcu"
 date = "2019-11-12"
 
 [[advisories]]
 name = "FreeBSD-SA-19:25.mcepsc"
 date = "2019-11-12"
 
 [[advisories]]
 name = "FreeBSD-SA-19:24.mqueuefs"
 date = "2019-08-20"
 
 [[advisories]]
 name = "FreeBSD-SA-19:23.midi"
 date = "2019-08-20"
 
 [[advisories]]
 name = "FreeBSD-SA-19:22.mbuf"
 date = "2019-08-20"
 
 [[advisories]]
 name = "FreeBSD-SA-19:21.bhyve"
 date = "2019-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-19:20.bsnmp"
 date = "2019-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-19:19.mldv2"
 date = "2019-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-19:18.bzip2"
 date = "2019-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-19:17.fd"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:16.bhyve"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:15.mqueuefs"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:14.freebsd32"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:13.pts"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:12.telnet"
 date = "2019-07-24"
 
 [[advisories]]
 name = "FreeBSD-SA-19:11.cd_ioctl"
 date = "2019-07-02"
 
 [[advisories]]
 name = "FreeBSD-SA-19:10.ufs"
 date = "2019-07-02"
 
 [[advisories]]
 name = "FreeBSD-SA-19:09.iconv"
 date = "2019-07-02"
 
 [[advisories]]
 name = "FreeBSD-SA-19:08.rack"
 date = "2019-06-19"
 
 [[advisories]]
 name = "FreeBSD-SA-19:07.mds"
 date = "2019-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-19:06.pf"
 date = "2019-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-19:05.pf"
 date = "2019-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-19:04.ntp"
 date = "2019-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-19:03.wpa"
 date = "2019-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-19:02.fd"
 date = "2019-02-05"
 
 [[advisories]]
 name = "FreeBSD-SA-19:01.syscall"
 date = "2019-02-05"
 
 [[advisories]]
 name = "FreeBSD-SA-18:15.bootpd"
 date = "2018-12-19"
 
 [[advisories]]
 name = "FreeBSD-SA-18:14.bhyve"
 date = "2018-12-04"
 
 [[advisories]]
 name = "FreeBSD-SA-18:13.nfs"
 date = "2018-11-27"
 
 [[advisories]]
 name = "FreeBSD-SA-18:12.elf"
 date = "2018-09-12"
 
 [[advisories]]
 name = "FreeBSD-SA-18:11.hostapd"
 date = "2018-08-14"
 
 [[advisories]]
 name = "FreeBSD-SA-18:10.ip"
 date = "2018-08-14"
 
 [[advisories]]
 name = "FreeBSD-SA-18:09.l1tf"
 date = "2018-08-14"
 
 [[advisories]]
 name = "FreeBSD-SA-18:08.tcp"
 date = "2018-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-18:07.lazyfpu"
 date = "2018-06-21"
 
 [[advisories]]
 name = "FreeBSD-SA-18:06.debugreg"
 date = "2018-05-08"
 
 [[advisories]]
 name = "FreeBSD-SA-18:05.ipsec"
 date = "2018-04-04"
 
 [[advisories]]
 name = "FreeBSD-SA-18:04.vt"
 date = "2018-04-04"
 
 [[advisories]]
 name = "FreeBSD-SA-18:03.speculative_execution"
 date = "2018-03-14"
 
 [[advisories]]
 name = "FreeBSD-SA-18:02.ntp"
 date = "2018-03-07"
 
 [[advisories]]
 name = "FreeBSD-SA-18:01.ipsec"
 date = "2018-03-07"
 
 [[advisories]]
 name = "FreeBSD-SA-17:12.openssl"
 date = "2017-12-09"
 
 [[advisories]]
 name = "FreeBSD-SA-17:11.openssl"
 date = "2017-11-29"
 
 [[advisories]]
 name = "FreeBSD-SA-17:10.kldstat"
 date = "2017-11-15"
 
 [[advisories]]
 name = "FreeBSD-SA-17:09.shm"
 date = "2017-11-15"
 
 [[advisories]]
 name = "FreeBSD-SA-17:08.ptrace"
 date = "2017-11-15"
 
 [[advisories]]
 name = "FreeBSD-SA-17:07.wpa"
 date = "2017-10-17"
 
 [[advisories]]
 name = "FreeBSD-SA-17:06.openssh"
 date = "2017-08-10"
 
 [[advisories]]
 name = "FreeBSD-SA-17:05.heimdal"
 date = "2017-07-12"
 
 [[advisories]]
 name = "FreeBSD-SA-17:04.ipfilter"
 date = "2017-04-27"
 
 [[advisories]]
 name = "FreeBSD-SA-17:03.ntp"
 date = "2017-04-12"
 
 [[advisories]]
 name = "FreeBSD-SA-17:02.openssl"
 date = "2017-02-23"
 
 [[advisories]]
 name = "FreeBSD-SA-17:01.openssh"
 date = "2017-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-16:39.ntp"
 date = "2016-12-22"
 
 [[advisories]]
 name = "FreeBSD-SA-16:38.bhyve"
 date = "2016-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-16:37.libc"
 date = "2016-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-16:36.telnetd"
 date = "2016-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-16:35.openssl"
 date = "2016-11-02"
 
 [[advisories]]
 name = "FreeBSD-SA-16:34.bind"
 date = "2016-11-02"
 
 [[advisories]]
 name = "FreeBSD-SA-16:33.openssh"
 date = "2016-11-02"
 
 [[advisories]]
 name = "FreeBSD-SA-16:32.bhyve"
 date = "2016-10-25"
 
 [[advisories]]
 name = "FreeBSD-SA-16:31.libarchive"
 date = "2016-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:30.portsnap"
 date = "2016-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:29.bspatch"
 date = "2016-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:28.bind"
 date = "2016-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:27.openssl"
 date = "2016-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:26.openssl"
 date = "2016-09-23"
 
 [[advisories]]
 name = "FreeBSD-SA-16:25.bspatch"
 date = "2016-07-25"
 
 [[advisories]]
 name = "FreeBSD-SA-16:24.ntp"
 date = "2016-06-04"
 
 [[advisories]]
 name = "FreeBSD-SA-16:23.libarchive"
 date = "2016-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-16:22.libarchive"
 date = "2016-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-16:21.43bsd"
 date = "2016-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-16:20.linux"
 date = "2016-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-16:19.sendmsg"
 date = "2016-05-17"
 
 [[advisories]]
 name = "FreeBSD-SA-16:18.atkbd"
 date = "2016-05-17"
 
 [[advisories]]
 name = "FreeBSD-SA-16:17.openssl"
 date = "2016-05-04"
 
 [[advisories]]
 name = "FreeBSD-SA-16:16.ntp"
 date = "2016-04-29"
 
 [[advisories]]
 name = "FreeBSD-SA-16:15.sysarch"
 date = "2016-03-16"
 
 [[advisories]]
 name = "FreeBSD-SA-16:14.openssh"
 date = "2016-03-16"
 
 [[advisories]]
 name = "FreeBSD-SA-16:13.bind"
 date = "2016-03-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:12.openssl"
 date = "2016-03-10"
 
 [[advisories]]
 name = "FreeBSD-SA-16:11.openssl"
 date = "2016-01-30"
 
 [[advisories]]
 name = "FreeBSD-SA-16:10.linux"
 date = "2016-01-27"
 
 [[advisories]]
 name = "FreeBSD-SA-16:09.ntp"
 date = "2016-01-27"
 
 [[advisories]]
 name = "FreeBSD-SA-16:08.bind"
 date = "2016-01-27"
 
 [[advisories]]
 name = "FreeBSD-SA-16:07.openssh"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:06.bsnmpd"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:05.tcp"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:04.linux"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:03.linux"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:02.ntp"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-16:01.sctp"
 date = "2016-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-15:27.bind"
 date = "2015-12-16"
 
 [[advisories]]
 name = "FreeBSD-SA-15:26.openssl"
 date = "2015-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-15:25.ntp"
 date = "2015-10-26"
 
 [[advisories]]
 name = "FreeBSD-SA-15:24.rpcbind"
 date = "2015-09-29"
 
 [[advisories]]
 name = "FreeBSD-SA-15:23.bind"
 date = "2015-09-02"
 
 [[advisories]]
 name = "FreeBSD-SA-15:22.openssh"
 date = "2015-08-25"
 
 [[advisories]]
 name = "FreeBSD-SA-15:21.amd64"
 date = "2015-08-25"
 
 [[advisories]]
 name = "FreeBSD-SA-15:20.expat"
 date = "2015-08-18"
 
 [[advisories]]
 name = "FreeBSD-SA-15:19.routed"
 date = "2015-08-05"
 
 [[advisories]]
 name = "FreeBSD-SA-15:18.bsdpatch"
 date = "2015-08-05"
 
 [[advisories]]
 name = "FreeBSD-SA-15:17.bind"
 date = "2015-07-28"
 
 [[advisories]]
 name = "FreeBSD-SA-15:16.openssh"
 date = "2015-07-28"
 
 [[advisories]]
 name = "FreeBSD-SA-15:15.tcp"
 date = "2015-07-28"
 
 [[advisories]]
 name = "FreeBSD-SA-15:14.bsdpatch"
 date = "2015-07-28"
 
 [[advisories]]
 name = "FreeBSD-SA-15:13.tcp"
 date = "2015-07-21"
 
 [[advisories]]
 name = "FreeBSD-SA-15:12.openssl"
 date = "2015-07-09"
 
 [[advisories]]
 name = "FreeBSD-SA-15:11.bind"
 date = "2015-07-07"
 
 [[advisories]]
 name = "FreeBSD-SA-15:10.openssl"
 date = "2015-06-12"
 
 [[advisories]]
 name = "FreeBSD-SA-15:09.ipv6"
 date = "2015-04-07"
 
 [[advisories]]
 name = "FreeBSD-SA-15:08.bsdinstall"
 date = "2015-04-07"
 
 [[advisories]]
 name = "FreeBSD-SA-15:07.ntp"
 date = "2015-04-07"
 
 [[advisories]]
 name = "FreeBSD-SA-15:06.openssl"
 date = "2015-03-19"
 
 [[advisories]]
 name = "FreeBSD-SA-15:05.bind"
 date = "2015-02-25"
 
 [[advisories]]
 name = "FreeBSD-SA-15:04.igmp"
 date = "2015-02-25"
 
 [[advisories]]
 name = "FreeBSD-SA-15:03.sctp"
 date = "2015-01-27"
 
 [[advisories]]
 name = "FreeBSD-SA-15:02.kmem"
 date = "2015-01-27"
 
 [[advisories]]
 name = "FreeBSD-SA-15:01.openssl"
 date = "2015-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-14:31.ntp"
 date = "2014-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-14:30.unbound"
 date = "2014-12-17"
 
 [[advisories]]
 name = "FreeBSD-SA-14:29.bind"
 date = "2014-12-10"
 
 [[advisories]]
 name = "FreeBSD-SA-14:28.file"
 date = "2014-12-10"
 
 [[advisories]]
 name = "FreeBSD-SA-14:27.stdio"
 date = "2014-12-10"
 
 [[advisories]]
 name = "FreeBSD-SA-14:26.ftp"
 date = "2014-11-04"
 
 [[advisories]]
 name = "FreeBSD-SA-14:25.setlogin"
 date = "2014-11-04"
 
 [[advisories]]
 name = "FreeBSD-SA-14:24.sshd"
 date = "2014-11-04"
 
 [[advisories]]
 name = "FreeBSD-SA-14:23.openssl"
 date = "2014-10-21"
 
 [[advisories]]
 name = "FreeBSD-SA-14:22.namei"
 date = "2014-10-21"
 
 [[advisories]]
 name = "FreeBSD-SA-14:21.routed"
 date = "2014-10-21"
 
 [[advisories]]
 name = "FreeBSD-SA-14:20.rtsold"
 date = "2014-10-21"
 
 [[advisories]]
 name = "FreeBSD-SA-14:19.tcp"
 date = "2014-09-16"
 
 [[advisories]]
 name = "FreeBSD-SA-14:18.openssl"
 date = "2014-09-09"
 
 [[advisories]]
 name = "FreeBSD-SA-14:17.kmem"
 date = "2014-07-08"
 
 [[advisories]]
 name = "FreeBSD-SA-14:16.file"
 date = "2014-06-24"
 
 [[advisories]]
 name = "FreeBSD-SA-14:15.iconv"
 date = "2014-06-24"
 
 [[advisories]]
 name = "FreeBSD-SA-14:14.openssl"
 date = "2014-06-05"
 
 [[advisories]]
 name = "FreeBSD-SA-14:13.pam"
 date = "2014-06-03"
 
 [[advisories]]
 name = "FreeBSD-SA-14:12.ktrace"
 date = "2014-06-03"
 
 [[advisories]]
 name = "FreeBSD-SA-14:11.sendmail"
 date = "2014-06-03"
 
 [[advisories]]
 name = "FreeBSD-SA-14:10.openssl"
 date = "2014-05-13"
 
 [[advisories]]
 name = "FreeBSD-SA-14:09.openssl"
 date = "2014-04-30"
 
 [[advisories]]
 name = "FreeBSD-SA-14:08.tcp"
 date = "2014-04-30"
 
 [[advisories]]
 name = "FreeBSD-SA-14:07.devfs"
 date = "2014-04-30"
 
 [[advisories]]
 name = "FreeBSD-SA-14:06.openssl"
 date = "2014-04-08"
 
 [[advisories]]
 name = "FreeBSD-SA-14:05.nfsserver"
 date = "2014-04-08"
 
 [[advisories]]
 name = "FreeBSD-SA-14:04.bind"
 date = "2014-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-14:03.openssl"
 date = "2014-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-14:02.ntpd"
 date = "2014-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-14:01.bsnmpd"
 date = "2014-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-13:14.openssh"
 date = "2013-11-19"
 
 [[advisories]]
 name = "FreeBSD-SA-13:13.nullfs"
 date = "2013-09-10"
 
 [[advisories]]
 name = "FreeBSD-SA-13:12.ifioctl"
 date = "2013-09-10"
 
 [[advisories]]
 name = "FreeBSD-SA-13:11.sendfile"
 date = "2013-09-10"
 
 [[advisories]]
 name = "FreeBSD-SA-13:10.sctp"
 date = "2013-08-22"
 
 [[advisories]]
 name = "FreeBSD-SA-13:09.ip_multicast"
 date = "2013-08-22"
 
 [[advisories]]
 name = "FreeBSD-SA-13:08.nfsserver"
 date = "2013-07-26"
 
 [[advisories]]
 name = "FreeBSD-SA-13:07.bind"
 date = "2013-07-26"
 
 [[advisories]]
 name = "FreeBSD-SA-13:06.mmap"
 date = "2013-06-18"
 
 [[advisories]]
 name = "FreeBSD-SA-13:05.nfsserver"
 date = "2013-04-29"
 
 [[advisories]]
 name = "FreeBSD-SA-13:04.bind"
 date = "2013-04-02"
 
 [[advisories]]
 name = "FreeBSD-SA-13:03.openssl"
 date = "2013-04-02"
 
 [[advisories]]
 name = "FreeBSD-SA-13:02.libc"
 date = "2013-02-19"
 
 [[advisories]]
 name = "FreeBSD-SA-13:01.bind"
 date = "2013-02-19"
 
 [[advisories]]
 name = "FreeBSD-SA-12:08.linux"
 date = "2012-11-22"
 
 [[advisories]]
 name = "FreeBSD-SA-12:07.hostapd"
 date = "2012-11-22"
 
 [[advisories]]
 name = "FreeBSD-SA-12:06.bind"
 date = "2012-11-22"
 
 [[advisories]]
 name = "FreeBSD-SA-12:05.bind"
 date = "2012-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-12:04.sysret"
 date = "2012-06-12"
 
 [[advisories]]
 name = "FreeBSD-SA-12:03.bind"
 date = "2012-06-12"
 
 [[advisories]]
 name = "FreeBSD-SA-12:02.crypt"
 date = "2012-05-30"
 
 [[advisories]]
 name = "FreeBSD-SA-12:01.openssl"
 date = "2012-05-30"
 
 [[advisories]]
 name = "FreeBSD-SA-11:10.pam"
 date = "2011-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-11:09.pam_ssh"
 date = "2011-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-11:08.telnetd"
 date = "2011-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-11:07.chroot"
 date = "2011-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-11:06.bind"
 date = "2011-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-11:05.unix"
 date = "2011-09-28"
 
 [[advisories]]
 name = "FreeBSD-SA-11:04.compress"
 date = "2011-09-28"
 
 [[advisories]]
 name = "FreeBSD-SA-11:03.bind"
 date = "2011-09-28"
 
 [[advisories]]
 name = "FreeBSD-SA-11:02.bind"
 date = "2011-05-28"
 
 [[advisories]]
 name = "FreeBSD-SA-11:01.mountd"
 date = "2011-04-20"
 
 [[advisories]]
 name = "FreeBSD-SA-10:10.openssl"
 date = "2010-11-29"
 
 [[advisories]]
 name = "FreeBSD-SA-10:09.pseudofs"
 date = "2010-11-10"
 
 [[advisories]]
 name = "FreeBSD-SA-10:08.bzip2"
 date = "2010-09-20"
 
 [[advisories]]
 name = "FreeBSD-SA-10:07.mbuf"
 date = "2010-07-13"
 
 [[advisories]]
 name = "FreeBSD-SA-10:06.nfsclient"
 date = "2010-05-27"
 
 [[advisories]]
 name = "FreeBSD-SA-10:05.opie"
 date = "2010-05-27"
 
 [[advisories]]
 name = "FreeBSD-SA-10:04.jail"
 date = "2010-05-27"
 
 [[advisories]]
 name = "FreeBSD-SA-10:03.zfs"
 date = "2010-01-06"
 
 [[advisories]]
 name = "FreeBSD-SA-10:02.ntpd"
 date = "2010-01-06"
 
 [[advisories]]
 name = "FreeBSD-SA-10:01.bind"
 date = "2010-01-06"
 
 [[advisories]]
 name = "FreeBSD-SA-09:17.freebsd-update"
 date = "2009-12-03"
 
 [[advisories]]
 name = "FreeBSD-SA-09:16.rtld"
 date = "2009-12-03"
 
 [[advisories]]
 name = "FreeBSD-SA-09:15.ssl"
 date = "2009-12-03"
 
 [[advisories]]
 name = "FreeBSD-SA-09:14.devfs"
 date = "2009-10-02"
 
 [[advisories]]
 name = "FreeBSD-SA-09:13.pipe"
 date = "2009-10-02"
 
 [[advisories]]
 name = "FreeBSD-SA-09:12.bind"
 date = "2009-07-29"
 
 [[advisories]]
 name = "FreeBSD-SA-09:11.ntpd"
 date = "2009-06-10"
 
 [[advisories]]
 name = "FreeBSD-SA-09:10.ipv6"
 date = "2009-06-10"
 
 [[advisories]]
 name = "FreeBSD-SA-09:09.pipe"
 date = "2009-06-10"
 
 [[advisories]]
 name = "FreeBSD-SA-09:08.openssl"
 date = "2009-04-22"
 
 [[advisories]]
 name = "FreeBSD-SA-09:07.libc"
 date = "2009-04-22"
 
 [[advisories]]
 name = "FreeBSD-SA-09:06.ktimer"
 date = "2009-03-23"
 
 [[advisories]]
 name = "FreeBSD-SA-09:05.telnetd"
 date = "2009-02-16"
 
 [[advisories]]
 name = "FreeBSD-SA-09:04.bind"
 date = "2009-01-13"
 
 [[advisories]]
 name = "FreeBSD-SA-09:03.ntpd"
 date = "2009-01-13"
 
 [[advisories]]
 name = "FreeBSD-SA-09:02.openssl"
 date = "2009-01-07"
 
 [[advisories]]
 name = "FreeBSD-SA-09:01.lukemftpd"
 date = "2009-01-07"
 
 [[advisories]]
 name = "FreeBSD-SA-08:13.protosw"
 date = "2008-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-08:12.ftpd"
 date = "2008-12-23"
 
 [[advisories]]
 name = "FreeBSD-SA-08:11.arc4random"
 date = "2008-11-24"
 
 [[advisories]]
 name = "FreeBSD-SA-08:10.nd6"
 date = "2008-10-02"
 
 [[advisories]]
 name = "FreeBSD-SA-08:09.icmp6"
 date = "2008-09-03"
 
 [[advisories]]
 name = "FreeBSD-SA-08:08.nmount"
 date = "2008-09-03"
 
 [[advisories]]
 name = "FreeBSD-SA-08:07.amd64"
 date = "2008-09-03"
 
 [[advisories]]
 name = "FreeBSD-SA-08:06.bind"
 date = "2008-07-13"
 
 [[advisories]]
 name = "FreeBSD-SA-08:05.openssh"
 date = "2008-04-17"
 
 [[advisories]]
 name = "FreeBSD-SA-08:04.ipsec"
 date = "2008-02-14"
 
 [[advisories]]
 name = "FreeBSD-SA-08:03.sendfile"
 date = "2008-02-14"
 
 [[advisories]]
 name = "FreeBSD-SA-08:02.libc"
 date = "2008-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-08:01.pty"
 date = "2008-01-14"
 
 [[advisories]]
 name = "FreeBSD-SA-07:10.gtar"
 date = "2007-11-29"
 
 [[advisories]]
 name = "FreeBSD-SA-07:09.random"
 date = "2007-11-29"
 
 [[advisories]]
 name = "FreeBSD-SA-07:08.openssl"
 date = "2007-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-07:07.bind"
 date = "2007-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-07:06.tcpdump"
 date = "2007-08-01"
 
 [[advisories]]
 name = "FreeBSD-SA-07:05.libarchive"
 date = "2007-07-12"
 
 [[advisories]]
 name = "FreeBSD-SA-07:04.file"
 date = "2007-05-23"
 
 [[advisories]]
 name = "FreeBSD-SA-07:03.ipv6"
 date = "2007-04-26"
 
 [[advisories]]
 name = "FreeBSD-SA-07:02.bind"
 date = "2007-02-09"
 
 [[advisories]]
 name = "FreeBSD-SA-07:01.jail"
 date = "2007-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-06:26.gtar"
 date = "2006-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-06:25.kmem"
 date = "2006-12-06"
 
 [[advisories]]
 name = "FreeBSD-SA-06:24.libarchive"
 date = "2006-11-08"
 
 [[advisories]]
 name = "FreeBSD-SA-06:22.openssh"
 date = "2006-09-30"
 
 [[advisories]]
 name = "FreeBSD-SA-06:23.openssl"
 date = "2006-09-28"
 
 [[advisories]]
 name = "FreeBSD-SA-06:21.gzip"
 date = "2006-09-19"
 
 [[advisories]]
 name = "FreeBSD-SA-06:20.bind"
 date = "2006-09-06"
 
 [[advisories]]
 name = "FreeBSD-SA-06:19.openssl"
 date = "2006-09-06"
 
 [[advisories]]
 name = "FreeBSD-SA-06:18.ppp"
 date = "2006-08-23"
 
 [[advisories]]
 name = "FreeBSD-SA-06:17.sendmail"
 date = "2006-06-14"
 
 [[advisories]]
 name = "FreeBSD-SA-06:16.smbfs"
 date = "2006-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-06:15.ypserv"
 date = "2006-05-31"
 
 [[advisories]]
 name = "FreeBSD-SA-06:14.fpu"
 date = "2006-04-19"
 
 [[advisories]]
 name = "FreeBSD-SA-06:13.sendmail"
 date = "2006-03-22"
 
 [[advisories]]
 name = "FreeBSD-SA-06:12.opie"
 date = "2006-03-22"
 
 [[advisories]]
 name = "FreeBSD-SA-06:11.ipsec"
 date = "2006-03-22"
 
 [[advisories]]
 name = "FreeBSD-SA-06:10.nfs"
 date = "2006-03-01"
 
 [[advisories]]
 name = "FreeBSD-SA-06:09.openssh"
 date = "2006-03-01"
 
 [[advisories]]
 name = "FreeBSD-SA-06:08.sack"
 date = "2006-02-01"
 
 [[advisories]]
 name = "FreeBSD-SA-06:07.pf"
 date = "2006-01-25"
 
 [[advisories]]
 name = "FreeBSD-SA-06:06.kmem"
 date = "2006-01-25"
 
 [[advisories]]
 name = "FreeBSD-SA-06:05.80211"
 date = "2006-01-18"
 
 [[advisories]]
 name = "FreeBSD-SA-06:04.ipfw"
 date = "2006-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-06:03.cpio"
 date = "2006-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-06:02.ee"
 date = "2006-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-06:01.texindex"
 date = "2006-01-11"
 
 [[advisories]]
 name = "FreeBSD-SA-05:21.openssl"
 date = "2005-10-11"
 
 [[advisories]]
 name = "FreeBSD-SA-05:20.cvsbug"
 date = "2005-09-07"
 
 [[advisories]]
 name = "FreeBSD-SA-05:19.ipsec"
 date = "2005-07-27"
 
 [[advisories]]
 name = "FreeBSD-SA-05:18.zlib"
 date = "2005-07-27"
 
 [[advisories]]
 name = "FreeBSD-SA-05:17.devfs"
 date = "2005-07-20"
 
 [[advisories]]
 name = "FreeBSD-SA-05:16.zlib"
 date = "2005-07-06"
 
 [[advisories]]
 name = "FreeBSD-SA-05:15.tcp"
 date = "2005-06-29"
 
 [[advisories]]
 name = "FreeBSD-SA-05:14.bzip2"
 date = "2005-06-29"
 
 [[advisories]]
 name = "FreeBSD-SA-05:13.ipfw"
 date = "2005-06-29"
 
 [[advisories]]
 name = "FreeBSD-SA-05:12.bind9"
 date = "2005-06-09"
 
 [[advisories]]
 name = "FreeBSD-SA-05:11.gzip"
 date = "2005-06-09"
 
 [[advisories]]
 name = "FreeBSD-SA-05:10.tcpdump"
 date = "2005-06-09"
 
 [[advisories]]
 name = "FreeBSD-SA-05:09.htt"
 date = "2005-05-13"
 
 [[advisories]]
 name = "FreeBSD-SA-05:08.kmem"
 date = "2005-05-06"
 
 [[advisories]]
 name = "FreeBSD-SA-05:07.ldt"
 date = "2005-05-06"
 
 [[advisories]]
 name = "FreeBSD-SA-05:06.iir"
 date = "2005-05-06"
 
 [[advisories]]
 name = "FreeBSD-SA-05:05.cvs"
 date = "2005-04-22"
 
 [[advisories]]
 name = "FreeBSD-SA-05:04.ifconf"
 date = "2005-04-15"
 
 [[advisories]]
 name = "FreeBSD-SA-05:03.amd64"
 date = "2005-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-05:02.sendfile"
 date = "2005-04-04"
 
 [[advisories]]
 name = "FreeBSD-SA-05:01.telnet"
 date = "2005-03-28"
 
 [[advisories]]
 name = "FreeBSD-SA-04:17.procfs"
 date = "2004-12-01"
 
 [[advisories]]
 name = "FreeBSD-SA-04:16.fetch"
 date = "2004-11-18"
 
 [[advisories]]
 name = "FreeBSD-SA-04:15.syscons"
 date = "2004-10-04"
 
 [[advisories]]
 name = "FreeBSD-SA-04:14.cvs"
 date = "2004-09-19"
 
 [[advisories]]
 name = "FreeBSD-SA-04:13.linux"
 date = "2004-06-30"
 
 [[advisories]]
 name = "FreeBSD-SA-04:12.jailroute"
 date = "2004-06-07"
 
 [[advisories]]
 name = "FreeBSD-SA-04:11.msync"
 date = "2004-05-19"
 
 [[advisories]]
 name = "FreeBSD-SA-04:10.cvs"
 date = "2004-05-19"
 
 [[advisories]]
 name = "FreeBSD-SA-04:09.kadmind"
 date = "2004-05-05"
 
 [[advisories]]
 name = "FreeBSD-SA-04:08.heimdal"
 date = "2004-05-05"
 
 [[advisories]]
 name = "FreeBSD-SA-04:07.cvs"
 date = "2004-04-15"
 
 [[advisories]]
 name = "FreeBSD-SA-04:06.ipv6"
 date = "2004-03-29"
 
 [[advisories]]
 name = "FreeBSD-SA-04:05.openssl"
 date = "2004-03-17"
 
 [[advisories]]
 name = "FreeBSD-SA-04:04.tcp"
 date = "2004-03-02"
 
 [[advisories]]
 name = "FreeBSD-SA-04:03.jail"
 date = "2004-02-25"
 
 [[advisories]]
 name = "FreeBSD-SA-04:02.shmat"
 date = "2004-02-05"
 
 [[advisories]]
 name = "FreeBSD-SA-04:01.mksnap_ffs"
 date = "2004-01-30"
 
 [[advisories]]
 name = "FreeBSD-SA-03:19.bind"
 date = "2003-11-28"
 
 [[advisories]]
 name = "FreeBSD-SA-03:15.openssh"
 date = "2003-10-05"
 
 [[advisories]]
 name = "FreeBSD-SA-03:18.openssl"
 date = "2003-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-03:17.procfs"
 date = "2003-10-03"
 
 [[advisories]]
 name = "FreeBSD-SA-03:16.filedesc"
 date = "2003-10-02"
 
 [[advisories]]
 name = "FreeBSD-SA-03:14.arp"
 date = "2003-09-23"
 
 [[advisories]]
 name = "FreeBSD-SA-03:13.sendmail"
 date = "2003-09-17"
 
 [[advisories]]
 name = "FreeBSD-SA-03:12.openssh"
 date = "2003-09-16"
 
 [[advisories]]
 name = "FreeBSD-SA-03:11.sendmail"
 date = "2003-08-26"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1170"
 
 [[advisories]]
 name = "FreeBSD-SA-03:10.ibcs2"
 date = "2003-08-10"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1164"
 
 [[advisories]]
 name = "FreeBSD-SA-03:09.signal"
 date = "2003-08-10"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1163"
 
 [[advisories]]
 name = "FreeBSD-SA-03:08.realpath"
 date = "2003-08-03"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1158"
 
 [[advisories]]
 name = "FreeBSD-SN-03:02"
 date = "2003-04-08"
 
 [[advisories]]
 name = "FreeBSD-SN-03:01"
 date = "2003-04-07"
 
 [[advisories]]
 name = "FreeBSD-SA-03:07.sendmail"
 date = "2003-03-30"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1122"
 
 [[advisories]]
 name = "FreeBSD-SA-03:06.openssl"
 date = "2003-03-21"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1118"
 
 [[advisories]]
 name = "FreeBSD-SA-03:05.xdr"
 date = "2003-03-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1117"
 
 [[advisories]]
 name = "FreeBSD-SA-03:04.sendmail"
 date = "2003-03-03"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1112"
 
 [[advisories]]
 name = "FreeBSD-SA-03:03.syncookies"
 date = "2003-02-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1106"
 
 [[advisories]]
 name = "FreeBSD-SA-03:02.openssl"
 date = "2003-02-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1105"
 
 [[advisories]]
 name = "FreeBSD-SA-03:01.cvs"
 date = "2003-02-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1100"
 
 [[advisories]]
 name = "FreeBSD-SA-02:44.filedesc"
 date = "2003-01-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1090"
 
 [[advisories]]
 name = "FreeBSD-SA-02:43.bind"
 date = "2002-11-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1084"
 
 [[advisories]]
 name = "FreeBSD-SA-02:41.smrsh"
 date = "2002-11-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1082"
 
 [[advisories]]
 name = "FreeBSD-SA-02:42.resolv"
 date = "2002-11-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1083"
 
 [[advisories]]
 name = "FreeBSD-SA-02:40.kadmind"
 date = "2002-11-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1081"
 
 [[advisories]]
 name = "FreeBSD-SN-02:06"
 date = "2002-10-10"
 
 [[advisories]]
 name = "FreeBSD-SA-02:39.libkvm"
 date = "2002-09-16"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1051"
 
 [[advisories]]
 name = "FreeBSD-SN-02:05"
 date = "2002-08-28"
 
 [[advisories]]
 name = "FreeBSD-SA-02:38.signed-error"
 date = "2002-08-19"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1041"
 
 [[advisories]]
 name = "FreeBSD-SA-02:37.kqueue"
 date = "2002-08-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1033"
 
 [[advisories]]
 name = "FreeBSD-SA-02:36.nfs"
 date = "2002-08-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1032"
 
 [[advisories]]
 name = "FreeBSD-SA-02:35.ffs"
 date = "2002-08-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1031"
 
 [[advisories]]
 name = "FreeBSD-SA-02:33.openssl"
 date = "2002-08-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1023"
 
 [[advisories]]
 name = "FreeBSD-SA-02:34.rpc"
 date = "2002-08-01"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1024"
 
 [[advisories]]
 name = "FreeBSD-SA-02:32.pppd"
 date = "2002-07-31"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1022"
 
 [[advisories]]
 name = "FreeBSD-SA-02:31.openssh"
 date = "2002-07-15"
 
 [[advisories]]
 name = "FreeBSD-SA-02:30.ktrace"
 date = "2002-07-12"
 
 [[advisories]]
 name = "FreeBSD-SA-02:29.tcpdump"
 date = "2002-07-12"
 
 [[advisories]]
 name = "FreeBSD-SA-02:28.resolv"
 date = "2002-06-26"
 
 [[advisories]]
 name = "FreeBSD-SN-02:04"
 date = "2002-06-19"
 
 [[advisories]]
 name = "FreeBSD-SA-02:27.rc"
 date = "2002-05-29"
 
 [[advisories]]
 name = "FreeBSD-SA-02:26.accept"
 date = "2002-05-29"
 
 [[advisories]]
 name = "FreeBSD-SN-02:03"
 date = "2002-05-28"
 
 [[advisories]]
 name = "FreeBSD-SA-02:25.bzip2"
 date = "2002-05-20"
 
 [[advisories]]
 name = "FreeBSD-SA-02:24.k5su"
 date = "2002-05-20"
 
 [[advisories]]
 name = "FreeBSD-SN-02:02"
 date = "2002-05-13"
 
 [[advisories]]
 name = "FreeBSD-SA-02:23.stdio"
 date = "2002-04-22"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1021"
 
 [[advisories]]
 name = "FreeBSD-SA-02:22.mmap"
 date = "2002-04-18"
 
 [[advisories]]
 name = "FreeBSD-SA-02:21.tcpip"
 date = "2002-04-17"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/980"
 
 [[advisories]]
 name = "FreeBSD-SA-02:20.syncache"
 date = "2002-04-16"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/979"
 
 [[advisories]]
 name = "FreeBSD-SN-02:01"
 date = "2002-03-30"
 
 [[advisories]]
 name = "FreeBSD-SA-02:19.squid"
 date = "2002-03-26"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/960"
 
 [[advisories]]
 name = "FreeBSD-SA-02:18.zlib"
 date = "2002-03-18"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/978"
 
 [[advisories]]
 name = "FreeBSD-SA-02:17.mod_frontpage"
 date = "2002-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/954"
 
 [[advisories]]
 name = "FreeBSD-SA-02:16.netscape"
 date = "2002-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/953"
 
 [[advisories]]
 name = "FreeBSD-SA-02:15.cyrus-sasl"
 date = "2002-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/952"
 
 [[advisories]]
 name = "FreeBSD-SA-02:14.pam-pgsql"
 date = "2002-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/951"
 
 [[advisories]]
 name = "FreeBSD-SA-02:13.openssh"
 date = "2002-03-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/945"
 
 [[advisories]]
 name = "FreeBSD-SA-02:12.squid"
 date = "2002-02-21"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/938"
 
 [[advisories]]
 name = "FreeBSD-SA-02:11.snmp"
 date = "2002-02-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/936"
 
 [[advisories]]
 name = "FreeBSD-SA-02:10.rsync"
 date = "2002-02-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/928"
 
 [[advisories]]
 name = "FreeBSD-SA-02:09.fstatfs"
 date = "2002-02-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/927"
 
 [[advisories]]
 name = "FreeBSD-SA-02:08.exec"
 date = "2002-01-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/923"
 
 [[advisories]]
 name = "FreeBSD-SA-02:07.k5su"
 date = "2002-01-18"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/912"
 
 [[advisories]]
 name = "FreeBSD-SA-02:06.sudo"
 date = "2002-01-16"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/909"
 
 [[advisories]]
 name = "FreeBSD-SA-02:05.pine"
 date = "2002-01-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/894"
 
 [[advisories]]
 name = "FreeBSD-SA-02:04.mutt"
 date = "2002-01-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/893"
 
 [[advisories]]
 name = "FreeBSD-SA-02:03.mod_auth_pgsql"
 date = "2002-01-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/892"
 
 [[advisories]]
 name = "FreeBSD-SA-02:02.pw"
 date = "2002-01-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/891"
 
 [[advisories]]
 name = "FreeBSD-SA-02:01.pkg_add"
 date = "2002-01-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/898"
 
 [[advisories]]
 name = "FreeBSD-SA-01:64.wu-ftpd"
 date = "2001-12-04"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/870"
 
 [[advisories]]
 name = "FreeBSD-SA-01:63.openssh"
 date = "2001-12-02"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/871"
 
 [[advisories]]
 name = "FreeBSD-SA-01:62.uucp"
 date = "2001-10-08"
 
 [[advisories]]
 name = "FreeBSD-SA-01:61.squid"
 date = "2001-10-08"
 
 [[advisories]]
 name = "FreeBSD-SA-01:60.procmail"
 date = "2001-09-24"
 
 [[advisories]]
 name = "FreeBSD-SA-01:59.rmuser"
 date = "2001-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-01:58.lpd"
 date = "2001-08-30"
 
 [[advisories]]
 name = "FreeBSD-SA-01:57.sendmail"
 date = "2001-08-27"
 
 [[advisories]]
 name = "FreeBSD-SA-01:56.tcp_wrappers"
 date = "2001-08-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:55.procfs"
 date = "2001-08-21"
 
 [[advisories]]
 name = "FreeBSD-SA-01:54.ports-telnetd"
 date = "2001-08-20"
 
 [[advisories]]
 name = "FreeBSD-SA-01:53.ipfw"
 date = "2001-08-17"
 
 [[advisories]]
 name = "FreeBSD-SA-01:52.fragment"
 date = "2001-08-06"
 
 [[advisories]]
 name = "FreeBSD-SA-01:51.openssl"
 date = "2001-07-30"
 
 [[advisories]]
 name = "FreeBSD-SA-01:50.windowmaker"
 date = "2001-07-27"
 
 [[advisories]]
 name = "FreeBSD-SA-01:49.telnetd"
 date = "2001-07-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:48.tcpdump"
 date = "2001-07-17"
 
 [[advisories]]
 name = "FreeBSD-SA-01:47.xinetd"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:46.w3m"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:45.samba"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:44.gnupg"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:43.fetchmail"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:42.signal"
 date = "2001-07-10"
 
 [[advisories]]
 name = "FreeBSD-SA-01:41.hanterm"
 date = "2001-07-09"
 
 [[advisories]]
 name = "FreeBSD-SA-01:40.fts"
 date = "2001-06-04"
 
 [[advisories]]
 name = "FreeBSD-SA-01:39.tcp-isn"
 date = "2001-05-02"
 
 [[advisories]]
 name = "FreeBSD-SA-01:38.sudo"
 date = "2001-04-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:37.slrn"
 date = "2001-04-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:36.samba"
 date = "2001-04-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:35.licq"
 date = "2001-04-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:34.hylafax"
 date = "2001-04-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:33.ftpd-glob"
 date = "2001-04-17"
 
 [[advisories]]
 name = "FreeBSD-SA-01:32.ipfilter"
 date = "2001-04-16"
 
 [[advisories]]
 name = "FreeBSD-SA-01:31.ntpd"
 date = "2001-04-06"
 
 [[advisories]]
 name = "FreeBSD-SA-01:30.ufs-ext2fs"
 date = "2001-03-22"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/738"
 
 [[advisories]]
 name = "FreeBSD-SA-01:29.rwhod"
 date = "2001-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/732"
 
 [[advisories]]
 name = "FreeBSD-SA-01:28.timed"
 date = "2001-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/731"
 
 [[advisories]]
 name = "FreeBSD-SA-01:27.cfengine"
 date = "2001-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/730"
 
 [[advisories]]
 name = "FreeBSD-SA-01:26.interbase"
 date = "2001-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/729"
 
 [[advisories]]
 name = "FreeBSD-SA-01:23.icecast"
 date = "2001-03-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/728"
 
 [[advisories]]
 name = "FreeBSD-SA-01:25.kerberosIV"
 date = "2001-02-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/716"
 
 [[advisories]]
 name = "FreeBSD-SA-01:24.ssh"
 date = "2001-02-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/715"
 
 [[advisories]]
 name = "FreeBSD-SA-01:22.dc20ctrl"
 date = "2001-02-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/714"
 
 [[advisories]]
 name = "FreeBSD-SA-01:21.ja-elvis"
 date = "2001-02-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/713"
 
 [[advisories]]
 name = "FreeBSD-SA-01:20.mars_nwe"
 date = "2001-02-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/712"
 
 [[advisories]]
 name = "FreeBSD-SA-01:19.ja-klock"
 date = "2001-02-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/707"
 
 [[advisories]]
 name = "FreeBSD-SA-01:18.bind"
 date = "2001-01-31"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/706"
 
 [[advisories]]
 name = "FreeBSD-SA-01:17.exmh"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/705"
 
 [[advisories]]
 name = "FreeBSD-SA-01:16.mysql"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/704"
 
 [[advisories]]
 name = "FreeBSD-SA-01:15.tinyproxy"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/703"
 
 [[advisories]]
 name = "FreeBSD-SA-01:14.micq"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/702"
 
 [[advisories]]
 name = "FreeBSD-SA-01:13.sort"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/701"
 
 [[advisories]]
 name = "FreeBSD-SA-01:12.periodic"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/700"
 
 [[advisories]]
 name = "FreeBSD-SA-01:11.inetd"
 date = "2001-01-29"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/699"
 
 [[advisories]]
 name = "FreeBSD-SA-01:10.bind"
 date = "2001-01-23"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/698"
 
 [[advisories]]
 name = "FreeBSD-SA-01:09.crontab"
 date = "2001-01-23"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/697"
 
 [[advisories]]
 name = "FreeBSD-SA-01:08.ipfw"
 date = "2001-01-23"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/696"
 
 [[advisories]]
 name = "FreeBSD-SA-01:07.xfree86"
 date = "2001-01-23"
 
 [[advisories]]
 name = "FreeBSD-SA-01:06.zope"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/669"
 
 [[advisories]]
 name = "FreeBSD-SA-01:05.stunnel"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/668"
 
 [[advisories]]
 name = "FreeBSD-SA-01:04.joe"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/667"
 
 [[advisories]]
 name = "FreeBSD-SA-01:03.bash1"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/666"
 
 [[advisories]]
 name = "FreeBSD-SA-01:02.syslog-ng"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/665"
 
 [[advisories]]
 name = "FreeBSD-SA-01:01.openssh"
 date = "2001-01-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/664"
 
 [[advisories]]
 name = "FreeBSD-SA-00:81.ethereal"
 date = "2000-12-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/651"
 
 [[advisories]]
 name = "FreeBSD-SA-00:80.halflifeserver"
 date = "2000-12-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/650"
 
 [[advisories]]
 name = "FreeBSD-SA-00:79.oops"
 date = "2000-12-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/649"
 
 [[advisories]]
 name = "FreeBSD-SA-00:78.bitchx"
 date = "2000-12-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/648"
 
 [[advisories]]
 name = "FreeBSD-SA-00:77.procfs"
 date = "2000-12-18"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/647"
 
 [[advisories]]
 name = "FreeBSD-SA-00:76.tcsh-csh"
 date = "2000-11-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/628"
 
 [[advisories]]
 name = "FreeBSD-SA-00:75.php"
 date = "2000-11-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/627"
 
 [[advisories]]
 name = "FreeBSD-SA-00:74.gaim"
 date = "2000-11-20"
 
 [[advisories]]
 name = "FreeBSD-SA-00:73.thttpd"
 date = "2000-11-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/626"
 
 [[advisories]]
 name = "FreeBSD-SA-00:72.curl"
 date = "2000-11-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/625"
 
 [[advisories]]
 name = "FreeBSD-SA-00:71.mgetty"
 date = "2000-11-20"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/624"
 
 [[advisories]]
 name = "FreeBSD-SA-00:70.ppp-nat"
 date = "2000-11-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/623"
 
 [[advisories]]
 name = "FreeBSD-SA-00:69.telnetd"
 date = "2000-11-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/622"
 
 [[advisories]]
 name = "FreeBSD-SA-00:68.ncurses"
 date = "2000-11-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/621"
 
 [[advisories]]
 name = "FreeBSD-SA-00:67.gnupg"
 date = "2000-11-10"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/620"
 
 [[advisories]]
 name = "FreeBSD-SA-00:66.netscape"
 date = "2000-11-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/619"
 
 [[advisories]]
 name = "FreeBSD-SA-00:65.xfce"
 date = "2000-11-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/618"
 
 [[advisories]]
 name = "FreeBSD-SA-00:64.global"
 date = "2000-11-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/617"
 
 [[advisories]]
 name = "FreeBSD-SA-00:63.getnameinfo"
 date = "2000-11-01"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/589"
 
 [[advisories]]
 name = "FreeBSD-SA-00:62.top"
 date = "2000-11-01"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/616"
 
 [[advisories]]
 name = "FreeBSD-SA-00:61.tcpdump"
 date = "2000-10-31"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/615"
 
 [[advisories]]
 name = "FreeBSD-SA-00:60.boa"
 date = "2000-10-30"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/586"
 
 [[advisories]]
 name = "FreeBSD-SA-00:59.pine"
 date = "2000-10-30"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/585"
 
 [[advisories]]
 name = "FreeBSD-SA-00:58.chpass"
 date = "2000-10-30"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/584"
 
 [[advisories]]
 name = "FreeBSD-SA-00:57.muh"
 date = "2000-10-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/570"
 
 [[advisories]]
 name = "FreeBSD-SA-00:56.lprng"
 date = "2000-10-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/569"
 
 [[advisories]]
 name = "FreeBSD-SA-00:55.xpdf"
 date = "2000-10-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/568"
 
 [[advisories]]
 name = "FreeBSD-SA-00:54.fingerd"
 date = "2000-10-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/567"
 
 [[advisories]]
 name = "FreeBSD-SA-00:52.tcp-iss"
 date = "2000-10-06"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/561"
 
 [[advisories]]
 name = "FreeBSD-SA-00:53.catopen"
 date = "2000-09-27"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/562"
 
 [[advisories]]
 name = "FreeBSD-SA-00:51.mailman"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/550"
 
 [[advisories]]
 name = "FreeBSD-SA-00:50.listmanager"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/549"
 
 [[advisories]]
 name = "FreeBSD-SA-00:49.eject"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/548"
 
 [[advisories]]
 name = "FreeBSD-SA-00:48.xchat"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/547"
 
 [[advisories]]
 name = "FreeBSD-SA-00:47.pine"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/546"
 
 [[advisories]]
 name = "FreeBSD-SA-00:46.screen"
 date = "2000-09-13"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/545"
 
 [[advisories]]
 name = "FreeBSD-SA-00:45.esound"
 date = "2000-08-31"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/526"
 
 [[advisories]]
 name = "FreeBSD-SA-00:44.xlock"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/523"
 
 [[advisories]]
 name = "FreeBSD-SA-00:43.brouted"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/520"
 
 [[advisories]]
 name = "FreeBSD-SA-00:42.linux"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/530"
 
 [[advisories]]
 name = "FreeBSD-SA-00:41.elf"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/527"
 
 [[advisories]]
 name = "FreeBSD-SA-00:40.mopd"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/521"
 
 [[advisories]]
 name = "FreeBSD-SA-00:39.netscape"
 date = "2000-08-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/528"
 
 [[advisories]]
 name = "FreeBSD-SA-00:38.zope"
 date = "2000-08-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/525"
 
 [[advisories]]
 name = "FreeBSD-SA-00:37.cvsweb"
 date = "2000-08-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/524"
 
 [[advisories]]
 name = "FreeBSD-SA-00:36.ntop"
 date = "2000-08-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/531"
 
 [[advisories]]
 name = "FreeBSD-SA-00:35.proftpd"
 date = "2000-08-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/522"
 
 [[advisories]]
 name = "FreeBSD-SA-00:34.dhclient"
 date = "2000-08-14"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/529"
 
 [[advisories]]
 name = "FreeBSD-SA-00:33.kerberosIV"
 date = "2000-07-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/488"
 
 [[advisories]]
 name = "FreeBSD-SA-00:32.bitchx"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/487"
 
 [[advisories]]
 name = "FreeBSD-SA-00:31.canna"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/486"
 
 [[advisories]]
 name = "FreeBSD-SA-00:30.openssh"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/485"
 
 [[advisories]]
 name = "FreeBSD-SA-00:29.wu-ftpd"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/489"
 
 [[advisories]]
 name = "FreeBSD-SA-00:28.majordomo"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/484"
 
 [[advisories]]
 name = "FreeBSD-SA-00:27.XFree86-4"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/483"
 
 [[advisories]]
 name = "FreeBSD-SA-00:26.popper"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/482"
 
 [[advisories]]
 name = "FreeBSD-SA-00:24.libedit"
 date = "2000-07-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/481"
 
 [[advisories]]
 name = "FreeBSD-SA-00:23.ip-options"
 date = "2000-06-19"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/480"
 
 [[advisories]]
 name = "FreeBSD-SA-00:25.alpha-random"
 date = "2000-06-12"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/473"
 
 [[advisories]]
 name = "FreeBSD-SA-00:22.apsfilter"
 date = "2000-06-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/461"
 
 [[advisories]]
 name = "FreeBSD-SA-00:21.ssh"
 date = "2000-06-07"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/459"
 
 [[advisories]]
 name = "FreeBSD-SA-00:20.krb5"
 date = "2000-05-26"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/452"
 
 [[advisories]]
 name = "FreeBSD-SA-00:19.semconfig"
 date = "2000-05-23"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/451"
 
 [[advisories]]
 name = "FreeBSD-SA-00:18.gnapster.knapster"
 date = "2000-05-09"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/429"
 
 [[advisories]]
 name = "FreeBSD-SA-00:17.libmytinfo"
 date = "2000-05-09"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/442"
 
 [[advisories]]
 name = "FreeBSD-SA-00:16.golddig"
 date = "2000-05-09"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/439"
 
 [[advisories]]
 name = "FreeBSD-SA-00:15.imap-uw"
 date = "2000-04-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/438"
 
 [[advisories]]
 name = "FreeBSD-SA-00:14.imap-uw"
 date = "2000-04-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/441"
 
 [[advisories]]
 name = "FreeBSD-SA-00:13.generic-nqs"
 date = "2000-04-19"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/437"
 
 [[advisories]]
 name = "FreeBSD-SA-00:12.healthd"
 date = "2000-04-10"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/436"
 
 [[advisories]]
 name = "FreeBSD-SA-00:11.ircii"
 date = "2000-04-10"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/440"
 
 [[advisories]]
 name = "FreeBSD-SA-00:10.orville-write"
 date = "2000-03-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408"
 
 [[advisories]]
 name = "FreeBSD-SA-00:09.mtr"
 date = "2000-03-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408"
 
 [[advisories]]
 name = "FreeBSD-SA-00:08.lynx"
 date = "2000-03-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/407"
 
 [[advisories]]
 name = "FreeBSD-SA-00:07.mh"
 date = "2000-03-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/411"
 
 [[advisories]]
 name = "FreeBSD-SA-00:06.htdig"
 date = "2000-03-01"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/403"
 
 [[advisories]]
 name = "FreeBSD-SA-00:05.mysql"
 date = "2000-02-28"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/402"
 
 [[advisories]]
 name = "FreeBSD-SA-00:04.delegate"
 date = "2000-02-19"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/392"
 
 [[advisories]]
 name = "FreeBSD-SA-00:03.asmon"
 date = "2000-02-19"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/391"
 
 [[advisories]]
 name = "FreeBSD-SA-00:02.procfs"
 date = "2000-01-24"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/380"
 
 [[advisories]]
 name = "FreeBSD-SA-00:01.make"
 date = "2000-01-19"
 
 [[advisories]]
 name = "FreeBSD-SA-99:06.amd"
 date = "1999-09-16"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/318"
 
 [[advisories]]
 name = "FreeBSD-SA-99:05.fts"
 date = "1999-09-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/313"
 
 [[advisories]]
 name = "FreeBSD-SA-99:04.core"
 date = "1999-09-15"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/312"
 
 [[advisories]]
 name = "FreeBSD-SA-99:03.ftpd"
 date = "1999-09-05"
 link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/311"
 
 [[advisories]]
 name = "FreeBSD-SA-99:02.profil"
 date = "1999-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-99:01.chflags"
 date = "1999-09-04"
 
 [[advisories]]
 name = "FreeBSD-SA-98:08.fragment"
 date = "1998-11-04"
 
 [[advisories]]
 name = "FreeBSD-SA-98:07.rst"
 date = "1998-10-13"
 
 [[advisories]]
 name = "FreeBSD-SA-98:06.icmp"
 date = "1998-06-10"
 
 [[advisories]]
 name = "FreeBSD-SA-98:05.nfs"
 date = "1998-06-04"
 
 [[advisories]]
 name = "FreeBSD-SA-98:04.mmap"
 date = "1998-06-02"
 
 [[advisories]]
 name = "FreeBSD-SA-98:03.ttcp"
 date = "1998-05-14"
 
 [[advisories]]
 name = "FreeBSD-SA-98:02.mmap"
 date = "1998-03-12"
 
 [[advisories]]
 name = "FreeBSD-SA-97:06.f00f"
 date = "1997-12-09"
 
 [[advisories]]
 name = "FreeBSD-SA-98:01.land"
 date = "1997-12-01"
 
 [[advisories]]
 name = "FreeBSD-SA-97:05.open"
 date = "1997-10-29"
 
 [[advisories]]
 name = "FreeBSD-SA-97:04.procfs"
 date = "1997-08-19"
 
 [[advisories]]
 name = "FreeBSD-SA-97:03.sysinstall"
 date = "1997-04-07"
 
 [[advisories]]
 name = "FreeBSD-SA-97:02.lpd"
 date = "1997-03-26"
 
 [[advisories]]
 name = "FreeBSD-SA-97:01.setlocale"
 date = "1997-02-05"
 
 [[advisories]]
 name = "FreeBSD-SA-96:21.talkd"
 date = "1997-01-18"
 
 [[advisories]]
 name = "FreeBSD-SA-96:20.stack-overflow"
 date = "1996-12-16"
 
 [[advisories]]
 name = "FreeBSD-SA-96:19.modstat"
 date = "1996-12-10"
 
 [[advisories]]
 name = "FreeBSD-SA-96:18.lpr"
 date = "1996-11-25"
 
 [[advisories]]
 name = "FreeBSD-SA-96:17.rzsz"
 date = "1996-07-16"
 
 [[advisories]]
 name = "FreeBSD-SA-96:16.rdist"
 date = "1996-07-12"
 
 [[advisories]]
 name = "FreeBSD-SA-96:15.ppp"
 date = "1996-07-04"
 
 [[advisories]]
 name = "FreeBSD-SA-96:12.perl"
 date = "1996-06-28"
 
 [[advisories]]
 name = "FreeBSD-SA-96:14.ipfw"
 date = "1996-06-24"
 
 [[advisories]]
 name = "FreeBSD-SA-96:13.comsat"
 date = "1996-06-05"
 
 [[advisories]]
 name = "FreeBSD-SA-96:11.man"
 date = "1996-05-21"
 
 [[advisories]]
 name = "FreeBSD-SA-96:10.mount_union"
 date = "1996-05-17"
 
 [[advisories]]
 name = "FreeBSD-SA-96:09.vfsload"
 date = "1996-05-17"
 
 [[advisories]]
 name = "FreeBSD-SA-96:02.apache"
 date = "1996-04-22"
 
 [[advisories]]
 name = "FreeBSD-SA-96:08.syslog"
 date = "1996-04-21"
 
 [[advisories]]
 name = "FreeBSD-SA-96:01.sliplogin"
 date = "1996-04-21"
 
 [[advisories]]
 name = "FreeBSD-SA-96:03.sendmail-suggestion"
 date = "1996-04-20"
 
diff --git a/website/static/security/advisories/FreeBSD-SA-25:09.netinet.asc b/website/static/security/advisories/FreeBSD-SA-25:09.netinet.asc
new file mode 100644
index 0000000000..49fe1c653f
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-25:09.netinet.asc
@@ -0,0 +1,162 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-25:09.netinet                                     Security Advisory
+                                                          The FreeBSD Project
+
+Topic:          SO_REUSEPORT_LB breaks connect(2) for UDP sockets
+
+Category:       core
+Module:         netinet
+Announced:      2025-10-22
+Credits:        MSc. student Omer Ben Simhon and Prof. Amit Klein,
+                both from the Hebrew University School of Computer
+                Science and Engineering
+Affects:        All supported versions of FreeBSD.
+Corrected:      2025-10-22 15:48:25 UTC (stable/15, 15.0-STABLE)
+                2025-10-22 15:50:30 UTC (releng/15.0, 15.0-BETA2-p1)
+                2025-10-22 15:48:51 UTC (stable/14, 14.3-STABLE)
+                2025-10-22 15:51:57 UTC (releng/14.3, 14.3-RELEASE-p5)
+                2025-10-22 15:49:32 UTC (stable/13, 13.4-STABLE)
+                2025-10-22 15:53:35 UTC (releng/13.5, 13.5-RELEASE-p6)
+CVE Name:       CVE-2025-24934
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit <URL:https://security.FreeBSD.org/>.
+
+I.   Background
+
+SO_REUSEPORT_LB is a socket option, set by setsockopt(2), which allows multiple
+TCP or UDP sockets to bind to the same socket address, creating a
+load-balancing group.  Incoming packets and connections are distributed evenly
+among sockets in a group.  This helps network services avoid scalability
+bottlenecks caused by having a single TCP listening socket.  In particular, it
+is expected that sockets belonging to a load-balancing group will accept
+packets from any source address.
+
+II.  Problem Description
+
+Connected sockets are not intended to belong to load-balancing groups.
+However, the kernel failed to check the connection state of sockets when adding
+them to load-balancing groups.  Furthermore, when looking up the destination
+socket for an incoming packet, the kernel will match a socket belonging to a
+load-balancing group even if it is connected.
+
+Connected sockets are only supposed to receive packets originating from the
+connected host.  The above behavior violates this contract.
+
+III. Impact
+
+Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host
+will not observe any problems.  However, due to its membership in a
+load-balancing group, that socket will receive packets originating from any
+host.  This breaks the contract of the connect(2) and implied connect via
+sendto(2), and may leave the application vulnerable to spoofing attacks.
+
+IV.  Workaround
+
+No workaround is available.  Software which does not use SO_REUSEPORT_LB is
+not affected.
+
+V.   Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date.
+
+Perform one of the following:
+
+1) To update your vulnerable system via a binary patch:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, can be updated via the freebsd-update(8)
+utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+[FreeBSD 15.x]
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-15.patch
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-15.patch.asc
+# gpg --verify netinet-15.patch.asc
+
+[FreeBSD 14.x]
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-14.patch
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-14.patch.asc
+# gpg --verify netinet-14.patch.asc
+
+[FreeBSD 13.x]
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-13.patch
+# fetch https://security.FreeBSD.org/patches/SA-25:09/netinet-13.patch.asc
+# gpg --verify netinet-13.patch.asc
+
+b) Apply the patch.  Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
+system.
+
+VI.  Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path                             Hash                     Revision
+- -------------------------------------------------------------------------
+stable/15/                              ef159100ec2b    stable/15-n280782
+releng/15.0/                            98c539667881  releng/15.0-n280723
+stable/14/                              e276759b3687    stable/14-n272700
+releng/14.3/                            058bcb57cd4b  releng/14.3-n271448
+stable/13/                              df888c8f41f6    stable/13-n259508
+releng/13.5/                            90e14aa082d3  releng/13.5-n259180
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat <commit hash>
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24934>
+
+The latest revision of this advisory is available at
+<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-25:09.netinet.asc>
+-----BEGIN PGP SIGNATURE-----
+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+=RgID
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/patches/SA-25:09/netinet-13.patch b/website/static/security/patches/SA-25:09/netinet-13.patch
new file mode 100644
index 0000000000..49031737eb
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-13.patch
@@ -0,0 +1,244 @@
+--- sys/netinet/in_pcb.c.orig
++++ sys/netinet/in_pcb.c
+@@ -2668,6 +2668,7 @@
+ 	struct inpcbinfo *pcbinfo = inp->inp_pcbinfo;
+ 	struct inpcbport *phd;
+ 	u_int32_t hashkey_faddr;
++	bool connected;
+ 
+ 	INP_WLOCK_ASSERT(inp);
+ 	INP_HASH_WLOCK_ASSERT(pcbinfo);
+@@ -2676,11 +2677,15 @@
+ 	    ("in_pcbinshash: INP_INHASHLIST"));
+ 
+ #ifdef INET6
+-	if (inp->inp_vflag & INP_IPV6)
++	if (inp->inp_vflag & INP_IPV6) {
+ 		hashkey_faddr = INP6_PCBHASHKEY(&inp->in6p_faddr);
+-	else
++		connected = !IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr);
++	} else
+ #endif
+-	hashkey_faddr = inp->inp_faddr.s_addr;
++	{
++		hashkey_faddr = inp->inp_faddr.s_addr;
++		connected = inp->inp_faddr.s_addr != INADDR_ANY;
++	}
+ 
+ 	pcbhash = &pcbinfo->ipi_hashbase[INP_PCBHASH(hashkey_faddr,
+ 		 inp->inp_lport, inp->inp_fport, pcbinfo->ipi_hashmask)];
+@@ -2689,10 +2694,12 @@
+ 	    INP_PCBPORTHASH(inp->inp_lport, pcbinfo->ipi_porthashmask)];
+ 
+ 	/*
+-	 * Add entry to load balance group.
+-	 * Only do this if SO_REUSEPORT_LB is set.
++	 * Ignore SO_REUSEPORT_LB if the socket is connected.  Really this case
++	 * should be an error, but for UDP sockets it is not, and some
++	 * applications erroneously set it on connected UDP sockets, so we can't
++	 * change this without breaking compatibility.
+ 	 */
+-	if ((inp->inp_flags2 & INP_REUSEPORT_LB) != 0) {
++	if (!connected && (inp->inp_flags2 & INP_REUSEPORT_LB) != 0) {
+ 		int error = in_pcbinslbgrouphash(inp, M_NODOM);
+ 		if (error != 0)
+ 			return (error);
+@@ -2761,6 +2768,7 @@
+ 	struct inpcbinfo *pcbinfo = inp->inp_pcbinfo;
+ 	struct inpcbhead *head;
+ 	u_int32_t hashkey_faddr;
++	bool connected;
+ 
+ 	INP_WLOCK_ASSERT(inp);
+ 	INP_HASH_WLOCK_ASSERT(pcbinfo);
+@@ -2769,11 +2777,19 @@
+ 	    ("in_pcbrehash: !INP_INHASHLIST"));
+ 
+ #ifdef INET6
+-	if (inp->inp_vflag & INP_IPV6)
++	if (inp->inp_vflag & INP_IPV6) {
+ 		hashkey_faddr = INP6_PCBHASHKEY(&inp->in6p_faddr);
+-	else
++		connected = !IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_faddr);
++	} else
+ #endif
+-	hashkey_faddr = inp->inp_faddr.s_addr;
++	{
++		hashkey_faddr = inp->inp_faddr.s_addr;
++		connected = inp->inp_faddr.s_addr != INADDR_ANY;
++	}
++
++	/* See the comment in in_pcbinshash(). */
++	if (connected && (inp->inp_flags2 & INP_REUSEPORT_LB) != 0)
++		in_pcbremlbgrouphash(inp);
+ 
+ 	head = &pcbinfo->ipi_hashbase[INP_PCBHASH(hashkey_faddr,
+ 		inp->inp_lport, inp->inp_fport, pcbinfo->ipi_hashmask)];
+--- tests/sys/netinet/so_reuseport_lb_test.c.orig
++++ tests/sys/netinet/so_reuseport_lb_test.c
+@@ -29,6 +29,8 @@
+ 
+ #include <sys/cdefs.h>
+ #include <sys/param.h>
++#include <sys/filio.h>
++#include <sys/ioccom.h>
+ #include <sys/socket.h>
+ 
+ #include <netinet/in.h>
+@@ -236,10 +238,156 @@
+ 	}
+ }
+ 
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp);
++ATF_TC_BODY(connect_udp, tc)
++{
++	struct sockaddr_in sin = {
++		.sin_family = AF_INET,
++		.sin_len = sizeof(sin),
++		.sin_addr = { htonl(INADDR_LOOPBACK) },
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len >= 1, "expected data available");
++}
++
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp6);
++ATF_TC_BODY(connect_udp6, tc)
++{
++	struct sockaddr_in6 sin6 = {
++		.sin6_family = AF_INET6,
++		.sin6_len = sizeof(sin6),
++		.sin6_addr = IN6ADDR_LOOPBACK_INIT,
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len >= 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len >= 1, "expected data available");
++}
++
+ ATF_TP_ADD_TCS(tp)
+ {
+ 	ATF_TP_ADD_TC(tp, basic_ipv4);
+ 	ATF_TP_ADD_TC(tp, basic_ipv6);
++	ATF_TP_ADD_TC(tp, connect_udp);
++	ATF_TP_ADD_TC(tp, connect_udp6);
+ 
+ 	return (atf_no_error());
+ }
diff --git a/website/static/security/patches/SA-25:09/netinet-13.patch.asc b/website/static/security/patches/SA-25:09/netinet-13.patch.asc
new file mode 100644
index 0000000000..4767da0d8d
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-13.patch.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=4UW4
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/patches/SA-25:09/netinet-14.patch b/website/static/security/patches/SA-25:09/netinet-14.patch
new file mode 100644
index 0000000000..0c022135e8
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-14.patch
@@ -0,0 +1,198 @@
+--- sys/netinet/in_pcb.c.orig
++++ sys/netinet/in_pcb.c
+@@ -2702,10 +2702,13 @@
+ 	    INP_PCBPORTHASH(inp->inp_lport, pcbinfo->ipi_porthashmask)];
+ 
+ 	/*
+-	 * Add entry to load balance group.
+-	 * Only do this if SO_REUSEPORT_LB is set.
++	 * Ignore SO_REUSEPORT_LB if the socket is connected.  Really this case
++	 * should be an error, but for UDP sockets it is not, and some
++	 * applications erroneously set it on connected UDP sockets, so we can't
++	 * change this without breaking compatibility.
+ 	 */
+-	if ((inp->inp_socket->so_options & SO_REUSEPORT_LB) != 0) {
++	if (!connected &&
++	    (inp->inp_socket->so_options & SO_REUSEPORT_LB) != 0) {
+ 		int error = in_pcbinslbgrouphash(inp, M_NODOM);
+ 		if (error != 0)
+ 			return (error);
+@@ -2836,6 +2839,10 @@
+ 		connected = !in_nullhost(inp->inp_faddr);
+ 	}
+ 
++	/* See the comment in in_pcbinshash(). */
++	if (connected && (inp->inp_flags & INP_INLBGROUP) != 0)
++		in_pcbremlbgrouphash(inp);
++
+ 	/*
+ 	 * When rehashing, the caller must ensure that either the new or the old
+ 	 * foreign address was unspecified.
+--- tests/sys/netinet/so_reuseport_lb_test.c.orig
++++ tests/sys/netinet/so_reuseport_lb_test.c
+@@ -29,6 +29,8 @@
+ 
+ #include <sys/cdefs.h>
+ #include <sys/param.h>
++#include <sys/filio.h>
++#include <sys/ioccom.h>
+ #include <sys/socket.h>
+ 
+ #include <netinet/in.h>
+@@ -236,10 +238,156 @@
+ 	}
+ }
+ 
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp);
++ATF_TC_BODY(connect_udp, tc)
++{
++	struct sockaddr_in sin = {
++		.sin_family = AF_INET,
++		.sin_len = sizeof(sin),
++		.sin_addr = { htonl(INADDR_LOOPBACK) },
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 1, "unexpected data available");
++}
++
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp6);
++ATF_TC_BODY(connect_udp6, tc)
++{
++	struct sockaddr_in6 sin6 = {
++		.sin6_family = AF_INET6,
++		.sin6_len = sizeof(sin6),
++		.sin6_addr = IN6ADDR_LOOPBACK_INIT,
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 1, "unexpected data available");
++}
++
+ ATF_TP_ADD_TCS(tp)
+ {
+ 	ATF_TP_ADD_TC(tp, basic_ipv4);
+ 	ATF_TP_ADD_TC(tp, basic_ipv6);
++	ATF_TP_ADD_TC(tp, connect_udp);
++	ATF_TP_ADD_TC(tp, connect_udp6);
+ 
+ 	return (atf_no_error());
+ }
diff --git a/website/static/security/patches/SA-25:09/netinet-14.patch.asc b/website/static/security/patches/SA-25:09/netinet-14.patch.asc
new file mode 100644
index 0000000000..b0c2e2429c
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-14.patch.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=lJlP
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/patches/SA-25:09/netinet-15.patch b/website/static/security/patches/SA-25:09/netinet-15.patch
new file mode 100644
index 0000000000..7083189c9a
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-15.patch
@@ -0,0 +1,201 @@
+--- sys/netinet/in_pcb.c.orig
++++ sys/netinet/in_pcb.c
+@@ -2665,10 +2665,13 @@
+ 	    INP_PCBPORTHASH(inp->inp_lport, pcbinfo->ipi_porthashmask)];
+ 
+ 	/*
+-	 * Add entry to load balance group.
+-	 * Only do this if SO_REUSEPORT_LB is set.
++	 * Ignore SO_REUSEPORT_LB if the socket is connected.  Really this case
++	 * should be an error, but for UDP sockets it is not, and some
++	 * applications erroneously set it on connected UDP sockets, so we can't
++	 * change this without breaking compatibility.
+ 	 */
+-	if ((inp->inp_socket->so_options & SO_REUSEPORT_LB) != 0) {
++	if (!connected &&
++	    (inp->inp_socket->so_options & SO_REUSEPORT_LB) != 0) {
+ 		int error = in_pcbinslbgrouphash(inp, M_NODOM);
+ 		if (error != 0)
+ 			return (error);
+@@ -2770,6 +2773,10 @@
+ 		connected = !in_nullhost(inp->inp_faddr);
+ 	}
+ 
++	/* See the comment in in_pcbinshash(). */
++	if (connected && (inp->inp_flags & INP_INLBGROUP) != 0)
++		in_pcbremlbgrouphash(inp);
++
+ 	/*
+ 	 * When rehashing, the caller must ensure that either the new or the old
+ 	 * foreign address was unspecified.
+--- tests/sys/netinet/so_reuseport_lb_test.c.orig
++++ tests/sys/netinet/so_reuseport_lb_test.c
+@@ -29,6 +29,8 @@
+ 
+ #include <sys/param.h>
+ #include <sys/event.h>
++#include <sys/filio.h>
++#include <sys/ioccom.h>
+ #include <sys/socket.h>
+ 
+ #include <netinet/in.h>
+@@ -551,6 +553,150 @@
+ 	close(s);
+ }
+ 
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp);
++ATF_TC_BODY(connect_udp, tc)
++{
++	struct sockaddr_in sin = {
++		.sin_family = AF_INET,
++		.sin_len = sizeof(sin),
++		.sin_addr = { htonl(INADDR_LOOPBACK) },
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin, sizeof(sin));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin,
++	    (socklen_t[]){sizeof(sin)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,
++	    sizeof(sin));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 1, "unexpected data available");
++}
++
++/*
++ * The kernel erroneously permits calling connect() on a UDP socket with
++ * SO_REUSEPORT_LB set.  Verify that packets sent to the bound address are
++ * dropped unless they come from the connected address.
++ */
++ATF_TC_WITHOUT_HEAD(connect_udp6);
++ATF_TC_BODY(connect_udp6, tc)
++{
++	struct sockaddr_in6 sin6 = {
++		.sin6_family = AF_INET6,
++		.sin6_len = sizeof(sin6),
++		.sin6_addr = IN6ADDR_LOOPBACK_INIT,
++	};
++	ssize_t n;
++	int error, len, s1, s2, s3;
++	char ch;
++
++	s1 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s1 >= 0);
++	s2 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s2 >= 0);
++	s3 = socket(PF_INET6, SOCK_DGRAM, 0);
++	ATF_REQUIRE(s3 >= 0);
++
++	error = setsockopt(s1, SOL_SOCKET, SO_REUSEPORT_LB, (int[]){1},
++	    sizeof(int));
++	ATF_REQUIRE_MSG(error == 0,
++	    "setsockopt(SO_REUSEPORT_LB) failed: %s", strerror(errno));
++	error = bind(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s2, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	error = bind(s3, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "bind() failed: %s", strerror(errno));
++
++	/* Connect to an address not owned by s2. */
++	error = getsockname(s3, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++	error = connect(s1, (struct sockaddr *)&sin6, sizeof(sin6));
++	ATF_REQUIRE_MSG(error == 0, "connect() failed: %s", strerror(errno));
++
++	/* Try to send a packet to s1 from s2. */
++	error = getsockname(s1, (struct sockaddr *)&sin6,
++	    (socklen_t[]){sizeof(sin6)});
++	ATF_REQUIRE(error == 0);
++
++	ch = 42;
++	n = sendto(s2, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++
++	/* Give the packet some time to arrive. */
++	usleep(100000);
++
++	/* s1 is connected to s3 and shouldn't receive from s2. */
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 0, "unexpected data available");
++
++	/* ... but s3 can of course send to s1. */
++	n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,
++	    sizeof(sin6));
++	ATF_REQUIRE(n == 1);
++	usleep(100000);
++	error = ioctl(s1, FIONREAD, &len);
++	ATF_REQUIRE(error == 0);
++	ATF_REQUIRE_MSG(len == 1, "unexpected data available");
++}
++
+ ATF_TP_ADD_TCS(tp)
+ {
+ 	ATF_TP_ADD_TC(tp, basic_ipv4);
+@@ -561,6 +707,8 @@
+ 	ATF_TP_ADD_TC(tp, bind_without_listen);
+ 	ATF_TP_ADD_TC(tp, connect_not_bound);
+ 	ATF_TP_ADD_TC(tp, connect_bound);
++	ATF_TP_ADD_TC(tp, connect_udp);
++	ATF_TP_ADD_TC(tp, connect_udp6);
+ 
+ 	return (atf_no_error());
+ }
diff --git a/website/static/security/patches/SA-25:09/netinet-15.patch.asc b/website/static/security/patches/SA-25:09/netinet-15.patch.asc
new file mode 100644
index 0000000000..380b5aba55
--- /dev/null
+++ b/website/static/security/patches/SA-25:09/netinet-15.patch.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=/zfq
+-----END PGP SIGNATURE-----