diff --git a/website/data/security/advisories.toml b/website/data/security/advisories.toml
index 611ec14b67..3c30ea9bd5 100644
--- a/website/data/security/advisories.toml
+++ b/website/data/security/advisories.toml
@@ -1,2863 +1,2887 @@
# Sort advisories by year, month and day
# $FreeBSD$
+[[advisories]]
+name = "FreeBSD-SA-26:17.libnv"
+date = "2026-04-29"
+
+[[advisories]]
+name = "FreeBSD-SA-26:16.libnv"
+date = "2026-04-29"
+
+[[advisories]]
+name = "FreeBSD-SA-26:15.dhclient"
+date = "2026-04-29"
+
+[[advisories]]
+name = "FreeBSD-SA-26:14.pf"
+date = "2026-04-29"
+
+[[advisories]]
+name = "FreeBSD-SA-26:13.exec"
+date = "2026-04-29"
+
+[[advisories]]
+name = "FreeBSD-SA-26:12.dhclient"
+date = "2026-04-29"
+
[[advisories]]
name = "FreeBSD-SA-26:11.amd64"
date = "2026-04-21"
[[advisories]]
name = "FreeBSD-SA-26:10.tty"
date = "2026-04-21"
[[advisories]]
name = "FreeBSD-SA-26:09.pf"
date = "2026-03-26"
[[advisories]]
name = "FreeBSD-SA-26:08.rpcsec_gss"
date = "2026-03-26"
[[advisories]]
name = "FreeBSD-SA-26:07.nvmf"
date = "2026-03-26"
[[advisories]]
name = "FreeBSD-SA-26:06.tcp"
date = "2026-03-26"
[[advisories]]
name = "FreeBSD-SA-26:05.route"
date = "2026-02-24"
[[advisories]]
name = "FreeBSD-SA-26:04.jail"
date = "2026-02-24"
[[advisories]]
name = "FreeBSD-SA-26:03.blocklistd"
date = "2026-02-10"
[[advisories]]
name = "FreeBSD-SA-26:02.jail"
date = "2026-01-27"
[[advisories]]
name = "FreeBSD-SA-26:01.openssl"
date = "2026-01-27"
[[advisories]]
name = "FreeBSD-SA-25:12.rtsold"
date = "2025-12-16"
[[advisories]]
name = "FreeBSD-SA-25:11.ipfw"
date = "2025-12-16"
[[advisories]]
name = "FreeBSD-SA-25:10.unbound"
date = "2025-11-26"
[[advisories]]
name = "FreeBSD-SA-25:09.netinet"
date = "2025-10-22"
[[advisories]]
name = "FreeBSD-SA-25:08.openssl"
date = "2025-09-30"
[[advisories]]
name = "FreeBSD-SA-25:07.libarchive"
date = "2025-08-08"
[[advisories]]
name = "FreeBSD-SA-25:06.xz"
date = "2025-07-02"
[[advisories]]
name = "FreeBSD-SA-25:05.openssh"
date = "2025-02-21"
[[advisories]]
name = "FreeBSD-SA-25:04.ktrace"
date = "2025-01-29"
[[advisories]]
name = "FreeBSD-SA-25:03.etcupdate"
date = "2025-01-29"
[[advisories]]
name = "FreeBSD-SA-25:02.fs"
date = "2025-01-29"
[[advisories]]
name = "FreeBSD-SA-25:01.openssh"
date = "2025-01-29"
[[advisories]]
name = "FreeBSD-SA-24:19.fetch"
date = "2024-10-29"
[[advisories]]
name = "FreeBSD-SA-24:18.ctl"
date = "2024-10-29"
[[advisories]]
name = "FreeBSD-SA-24:17.bhyve"
date = "2024-10-29"
[[advisories]]
name = "FreeBSD-SA-24:16.libnv"
date = "2024-09-19"
[[advisories]]
name = "FreeBSD-SA-24:15.bhyve"
date = "2024-09-19"
[[advisories]]
name = "FreeBSD-SA-24:14.umtx"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:13.openssl"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:12.bhyve"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:11.ctl"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:10.bhyve"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:09.libnv"
date = "2024-09-04"
[[advisories]]
name = "FreeBSD-SA-24:08.openssh"
date = "2024-08-07"
[[advisories]]
name = "FreeBSD-SA-24:07.nfsclient"
date = "2024-08-07"
[[advisories]]
name = "FreeBSD-SA-24:06.ktrace"
date = "2024-08-07"
[[advisories]]
name = "FreeBSD-SA-24:05.pf"
date = "2024-08-07"
[[advisories]]
name = "FreeBSD-SA-24:04.openssh"
date = "2024-07-01"
[[advisories]]
name = "FreeBSD-SA-24:03.unbound"
date = "2024-03-28"
[[advisories]]
name = "FreeBSD-SA-24:02.tty"
date = "2024-02-14"
[[advisories]]
name = "FreeBSD-SA-24:01.bhyveload"
date = "2024-02-14"
[[advisories]]
name = "FreeBSD-SA-23:19.openssh"
date = "2023-12-19"
[[advisories]]
name = "FreeBSD-SA-23:18.nfsclient"
date = "2023-12-12"
[[advisories]]
name = "FreeBSD-SA-23:17.pf"
date = "2023-12-05"
[[advisories]]
name = "FreeBSD-SA-23:16.cap_net"
date = "2023-11-08"
[[advisories]]
name = "FreeBSD-SA-23:15.stdio"
date = "2023-11-08"
[[advisories]]
name = "FreeBSD-SA-23:14.smccc"
date = "2023-10-03"
[[advisories]]
name = "FreeBSD-SA-23:13.capsicum"
date = "2023-10-03"
[[advisories]]
name = "FreeBSD-SA-23:12.msdosfs"
date = "2023-10-03"
[[advisories]]
name = "FreeBSD-SA-23:11.wifi"
date = "2023-09-06"
[[advisories]]
name = "FreeBSD-SA-23:10.pf"
date = "2023-09-06"
[[advisories]]
name = "FreeBSD-SA-23:09.pam_krb5"
date = "2023-08-01"
[[advisories]]
name = "FreeBSD-SA-23:08.ssh"
date = "2023-08-01"
[[advisories]]
name = "FreeBSD-SA-23:07.bhyve"
date = "2023-08-01"
[[advisories]]
name = "FreeBSD-SA-23:06.ipv6"
date = "2023-08-01"
[[advisories]]
name = "FreeBSD-SA-23:05.openssh"
date = "2023-06-21"
[[advisories]]
name = "FreeBSD-SA-23:04.pam_krb5"
date = "2023-06-21"
[[advisories]]
name = "FreeBSD-SA-23:03.openssl"
date = "2023-02-16"
[[advisories]]
name = "FreeBSD-SA-23:02.openssh"
date = "2023-02-16"
[[advisories]]
name = "FreeBSD-SA-23:01.geli"
date = "2023-02-08"
[[advisories]]
name = "FreeBSD-SA-22:15.ping"
date = "2022-11-29"
[[advisories]]
name = "FreeBSD-SA-22:14.heimdal"
date = "2022-11-15"
[[advisories]]
name = "FreeBSD-SA-22:13.zlib"
date = "2022-08-30"
[[advisories]]
name = "FreeBSD-SA-22:12.lib9p"
date = "2022-08-09"
[[advisories]]
name = "FreeBSD-SA-22:11.vm"
date = "2022-08-09"
[[advisories]]
name = "FreeBSD-SA-22:10.aio"
date = "2022-08-09"
[[advisories]]
name = "FreeBSD-SA-22:09.elf"
date = "2022-08-09"
[[advisories]]
name = "FreeBSD-SA-22:08.zlib"
date = "2022-04-06"
[[advisories]]
name = "FreeBSD-SA-22:07.wifi_meshid"
date = "2022-04-06"
[[advisories]]
name = "FreeBSD-SA-22:06.ioctl"
date = "2022-04-06"
[[advisories]]
name = "FreeBSD-SA-22:05.bhyve"
date = "2022-04-06"
[[advisories]]
name = "FreeBSD-SA-22:04.netmap"
date = "2022-04-06"
[[advisories]]
name = "FreeBSD-SA-22:03.openssl"
date = "2022-03-15"
[[advisories]]
name = "FreeBSD-SA-22:02.wifi"
date = "2022-03-15"
[[advisories]]
name = "FreeBSD-SA-22:01.vt"
date = "2022-01-11"
[[advisories]]
name = "FreeBSD-SA-21:17.openssl"
date = "2021-08-24"
[[advisories]]
name = "FreeBSD-SA-21:16.openssl"
date = "2021-08-24"
[[advisories]]
name = "FreeBSD-SA-21:15.libfetch"
date = "2021-08-24"
[[advisories]]
name = "FreeBSD-SA-21:14.ggatec"
date = "2021-08-24"
[[advisories]]
name = "FreeBSD-SA-21:13.bhyve"
date = "2021-08-24"
[[advisories]]
name = "FreeBSD-SA-21:12.libradius"
date = "2021-05-26"
[[advisories]]
name = "FreeBSD-SA-21:11.smap"
date = "2021-05-26"
[[advisories]]
name = "FreeBSD-SA-21:10.jail_mount"
date = "2021-04-06"
[[advisories]]
name = "FreeBSD-SA-21:09.accept_filter"
date = "2021-04-06"
[[advisories]]
name = "FreeBSD-SA-21:08.vm"
date = "2021-04-06"
[[advisories]]
name = "FreeBSD-SA-21:07.openssl"
date = "2021-03-25"
[[advisories]]
name = "FreeBSD-SA-21:06.xen"
date = "2021-02-24"
[[advisories]]
name = "FreeBSD-SA-21:05.jail_chdir"
date = "2021-02-24"
[[advisories]]
name = "FreeBSD-SA-21:04.jail_remove"
date = "2021-02-24"
[[advisories]]
name = "FreeBSD-SA-21:03.pam_login_access"
date = "2021-02-24"
[[advisories]]
name = "FreeBSD-SA-21:02.xenoom"
date = "2021-01-29"
[[advisories]]
name = "FreeBSD-SA-21:01.fsdisclosure"
date = "2021-01-29"
[[advisories]]
name = "FreeBSD-SA-20:33.openssl"
date = "2020-12-08"
[[advisories]]
name = "FreeBSD-SA-20:32.rtsold"
date = "2020-12-01"
[[advisories]]
name = "FreeBSD-SA-20:31.icmp6"
date = "2020-12-01"
[[advisories]]
name = "FreeBSD-SA-20:30.ftpd"
date = "2020-09-15"
[[advisories]]
name = "FreeBSD-SA-20:29.bhyve_svm"
date = "2020-09-15"
[[advisories]]
name = "FreeBSD-SA-20:28.bhyve_vmcs"
date = "2020-09-15"
[[advisories]]
name = "FreeBSD-SA-20:27.ure"
date = "2020-09-15"
[[advisories]]
name = "FreeBSD-SA-20:26.dhclient"
date = "2020-09-02"
[[advisories]]
name = "FreeBSD-SA-20:25.sctp"
date = "2020-09-02"
[[advisories]]
name = "FreeBSD-SA-20:24.ipv6"
date = "2020-09-02"
[[advisories]]
name = "FreeBSD-SA-20:23.sendmsg"
date = "2020-08-05"
[[advisories]]
name = "FreeBSD-SA-20:22.sqlite"
date = "2020-08-05"
[[advisories]]
name = "FreeBSD-SA-20:21.usb_net"
date = "2020-08-05"
[[advisories]]
name = "FreeBSD-SA-20:20.ipv6"
date = "2020-07-08"
[[advisories]]
name = "FreeBSD-SA-20:19.unbound"
date = "2020-07-08"
[[advisories]]
name = "FreeBSD-SA-20:18.posix_spawnp"
date = "2020-07-08"
[[advisories]]
name = "FreeBSD-SA-20:17.usb"
date = "2020-06-09"
[[advisories]]
name = "FreeBSD-SA-20:16.cryptodev"
date = "2020-05-12"
[[advisories]]
name = "FreeBSD-SA-20:15.cryptodev"
date = "2020-05-12"
[[advisories]]
name = "FreeBSD-SA-20:14.sctp"
date = "2020-05-12"
[[advisories]]
name = "FreeBSD-SA-20:13.libalias"
date = "2020-05-12"
[[advisories]]
name = "FreeBSD-SA-20:12.libalias"
date = "2020-05-12"
[[advisories]]
name = "FreeBSD-SA-20:11.openssl"
date = "2020-04-21"
[[advisories]]
name = "FreeBSD-SA-20:10.ipfw"
date = "2020-04-21"
[[advisories]]
name = "FreeBSD-SA-20:09.ntp"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:08.jail"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:07.epair"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:06.if_ixl_ioctl"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:05.if_oce_ioctl"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:04.tcp"
date = "2020-03-19"
[[advisories]]
name = "FreeBSD-SA-20:03.thrmisc"
date = "2020-01-28"
[[advisories]]
name = "FreeBSD-SA-20:02.ipsec"
date = "2020-01-28"
[[advisories]]
name = "FreeBSD-SA-20:01.libfetch"
date = "2020-01-28"
[[advisories]]
name = "FreeBSD-SA-19:26.mcu"
date = "2019-11-12"
[[advisories]]
name = "FreeBSD-SA-19:25.mcepsc"
date = "2019-11-12"
[[advisories]]
name = "FreeBSD-SA-19:24.mqueuefs"
date = "2019-08-20"
[[advisories]]
name = "FreeBSD-SA-19:23.midi"
date = "2019-08-20"
[[advisories]]
name = "FreeBSD-SA-19:22.mbuf"
date = "2019-08-20"
[[advisories]]
name = "FreeBSD-SA-19:21.bhyve"
date = "2019-08-06"
[[advisories]]
name = "FreeBSD-SA-19:20.bsnmp"
date = "2019-08-06"
[[advisories]]
name = "FreeBSD-SA-19:19.mldv2"
date = "2019-08-06"
[[advisories]]
name = "FreeBSD-SA-19:18.bzip2"
date = "2019-08-06"
[[advisories]]
name = "FreeBSD-SA-19:17.fd"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:16.bhyve"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:15.mqueuefs"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:14.freebsd32"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:13.pts"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:12.telnet"
date = "2019-07-24"
[[advisories]]
name = "FreeBSD-SA-19:11.cd_ioctl"
date = "2019-07-02"
[[advisories]]
name = "FreeBSD-SA-19:10.ufs"
date = "2019-07-02"
[[advisories]]
name = "FreeBSD-SA-19:09.iconv"
date = "2019-07-02"
[[advisories]]
name = "FreeBSD-SA-19:08.rack"
date = "2019-06-19"
[[advisories]]
name = "FreeBSD-SA-19:07.mds"
date = "2019-05-14"
[[advisories]]
name = "FreeBSD-SA-19:06.pf"
date = "2019-05-14"
[[advisories]]
name = "FreeBSD-SA-19:05.pf"
date = "2019-05-14"
[[advisories]]
name = "FreeBSD-SA-19:04.ntp"
date = "2019-05-14"
[[advisories]]
name = "FreeBSD-SA-19:03.wpa"
date = "2019-05-14"
[[advisories]]
name = "FreeBSD-SA-19:02.fd"
date = "2019-02-05"
[[advisories]]
name = "FreeBSD-SA-19:01.syscall"
date = "2019-02-05"
[[advisories]]
name = "FreeBSD-SA-18:15.bootpd"
date = "2018-12-19"
[[advisories]]
name = "FreeBSD-SA-18:14.bhyve"
date = "2018-12-04"
[[advisories]]
name = "FreeBSD-SA-18:13.nfs"
date = "2018-11-27"
[[advisories]]
name = "FreeBSD-SA-18:12.elf"
date = "2018-09-12"
[[advisories]]
name = "FreeBSD-SA-18:11.hostapd"
date = "2018-08-14"
[[advisories]]
name = "FreeBSD-SA-18:10.ip"
date = "2018-08-14"
[[advisories]]
name = "FreeBSD-SA-18:09.l1tf"
date = "2018-08-14"
[[advisories]]
name = "FreeBSD-SA-18:08.tcp"
date = "2018-08-06"
[[advisories]]
name = "FreeBSD-SA-18:07.lazyfpu"
date = "2018-06-21"
[[advisories]]
name = "FreeBSD-SA-18:06.debugreg"
date = "2018-05-08"
[[advisories]]
name = "FreeBSD-SA-18:05.ipsec"
date = "2018-04-04"
[[advisories]]
name = "FreeBSD-SA-18:04.vt"
date = "2018-04-04"
[[advisories]]
name = "FreeBSD-SA-18:03.speculative_execution"
date = "2018-03-14"
[[advisories]]
name = "FreeBSD-SA-18:02.ntp"
date = "2018-03-07"
[[advisories]]
name = "FreeBSD-SA-18:01.ipsec"
date = "2018-03-07"
[[advisories]]
name = "FreeBSD-SA-17:12.openssl"
date = "2017-12-09"
[[advisories]]
name = "FreeBSD-SA-17:11.openssl"
date = "2017-11-29"
[[advisories]]
name = "FreeBSD-SA-17:10.kldstat"
date = "2017-11-15"
[[advisories]]
name = "FreeBSD-SA-17:09.shm"
date = "2017-11-15"
[[advisories]]
name = "FreeBSD-SA-17:08.ptrace"
date = "2017-11-15"
[[advisories]]
name = "FreeBSD-SA-17:07.wpa"
date = "2017-10-17"
[[advisories]]
name = "FreeBSD-SA-17:06.openssh"
date = "2017-08-10"
[[advisories]]
name = "FreeBSD-SA-17:05.heimdal"
date = "2017-07-12"
[[advisories]]
name = "FreeBSD-SA-17:04.ipfilter"
date = "2017-04-27"
[[advisories]]
name = "FreeBSD-SA-17:03.ntp"
date = "2017-04-12"
[[advisories]]
name = "FreeBSD-SA-17:02.openssl"
date = "2017-02-23"
[[advisories]]
name = "FreeBSD-SA-17:01.openssh"
date = "2017-01-11"
[[advisories]]
name = "FreeBSD-SA-16:39.ntp"
date = "2016-12-22"
[[advisories]]
name = "FreeBSD-SA-16:38.bhyve"
date = "2016-12-06"
[[advisories]]
name = "FreeBSD-SA-16:37.libc"
date = "2016-12-06"
[[advisories]]
name = "FreeBSD-SA-16:36.telnetd"
date = "2016-12-06"
[[advisories]]
name = "FreeBSD-SA-16:35.openssl"
date = "2016-11-02"
[[advisories]]
name = "FreeBSD-SA-16:34.bind"
date = "2016-11-02"
[[advisories]]
name = "FreeBSD-SA-16:33.openssh"
date = "2016-11-02"
[[advisories]]
name = "FreeBSD-SA-16:32.bhyve"
date = "2016-10-25"
[[advisories]]
name = "FreeBSD-SA-16:31.libarchive"
date = "2016-10-10"
[[advisories]]
name = "FreeBSD-SA-16:30.portsnap"
date = "2016-10-10"
[[advisories]]
name = "FreeBSD-SA-16:29.bspatch"
date = "2016-10-10"
[[advisories]]
name = "FreeBSD-SA-16:28.bind"
date = "2016-10-10"
[[advisories]]
name = "FreeBSD-SA-16:27.openssl"
date = "2016-10-10"
[[advisories]]
name = "FreeBSD-SA-16:26.openssl"
date = "2016-09-23"
[[advisories]]
name = "FreeBSD-SA-16:25.bspatch"
date = "2016-07-25"
[[advisories]]
name = "FreeBSD-SA-16:24.ntp"
date = "2016-06-04"
[[advisories]]
name = "FreeBSD-SA-16:23.libarchive"
date = "2016-05-31"
[[advisories]]
name = "FreeBSD-SA-16:22.libarchive"
date = "2016-05-31"
[[advisories]]
name = "FreeBSD-SA-16:21.43bsd"
date = "2016-05-31"
[[advisories]]
name = "FreeBSD-SA-16:20.linux"
date = "2016-05-31"
[[advisories]]
name = "FreeBSD-SA-16:19.sendmsg"
date = "2016-05-17"
[[advisories]]
name = "FreeBSD-SA-16:18.atkbd"
date = "2016-05-17"
[[advisories]]
name = "FreeBSD-SA-16:17.openssl"
date = "2016-05-04"
[[advisories]]
name = "FreeBSD-SA-16:16.ntp"
date = "2016-04-29"
[[advisories]]
name = "FreeBSD-SA-16:15.sysarch"
date = "2016-03-16"
[[advisories]]
name = "FreeBSD-SA-16:14.openssh"
date = "2016-03-16"
[[advisories]]
name = "FreeBSD-SA-16:13.bind"
date = "2016-03-10"
[[advisories]]
name = "FreeBSD-SA-16:12.openssl"
date = "2016-03-10"
[[advisories]]
name = "FreeBSD-SA-16:11.openssl"
date = "2016-01-30"
[[advisories]]
name = "FreeBSD-SA-16:10.linux"
date = "2016-01-27"
[[advisories]]
name = "FreeBSD-SA-16:09.ntp"
date = "2016-01-27"
[[advisories]]
name = "FreeBSD-SA-16:08.bind"
date = "2016-01-27"
[[advisories]]
name = "FreeBSD-SA-16:07.openssh"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:06.bsnmpd"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:05.tcp"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:04.linux"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:03.linux"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:02.ntp"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-16:01.sctp"
date = "2016-01-14"
[[advisories]]
name = "FreeBSD-SA-15:27.bind"
date = "2015-12-16"
[[advisories]]
name = "FreeBSD-SA-15:26.openssl"
date = "2015-12-06"
[[advisories]]
name = "FreeBSD-SA-15:25.ntp"
date = "2015-10-26"
[[advisories]]
name = "FreeBSD-SA-15:24.rpcbind"
date = "2015-09-29"
[[advisories]]
name = "FreeBSD-SA-15:23.bind"
date = "2015-09-02"
[[advisories]]
name = "FreeBSD-SA-15:22.openssh"
date = "2015-08-25"
[[advisories]]
name = "FreeBSD-SA-15:21.amd64"
date = "2015-08-25"
[[advisories]]
name = "FreeBSD-SA-15:20.expat"
date = "2015-08-18"
[[advisories]]
name = "FreeBSD-SA-15:19.routed"
date = "2015-08-05"
[[advisories]]
name = "FreeBSD-SA-15:18.bsdpatch"
date = "2015-08-05"
[[advisories]]
name = "FreeBSD-SA-15:17.bind"
date = "2015-07-28"
[[advisories]]
name = "FreeBSD-SA-15:16.openssh"
date = "2015-07-28"
[[advisories]]
name = "FreeBSD-SA-15:15.tcp"
date = "2015-07-28"
[[advisories]]
name = "FreeBSD-SA-15:14.bsdpatch"
date = "2015-07-28"
[[advisories]]
name = "FreeBSD-SA-15:13.tcp"
date = "2015-07-21"
[[advisories]]
name = "FreeBSD-SA-15:12.openssl"
date = "2015-07-09"
[[advisories]]
name = "FreeBSD-SA-15:11.bind"
date = "2015-07-07"
[[advisories]]
name = "FreeBSD-SA-15:10.openssl"
date = "2015-06-12"
[[advisories]]
name = "FreeBSD-SA-15:09.ipv6"
date = "2015-04-07"
[[advisories]]
name = "FreeBSD-SA-15:08.bsdinstall"
date = "2015-04-07"
[[advisories]]
name = "FreeBSD-SA-15:07.ntp"
date = "2015-04-07"
[[advisories]]
name = "FreeBSD-SA-15:06.openssl"
date = "2015-03-19"
[[advisories]]
name = "FreeBSD-SA-15:05.bind"
date = "2015-02-25"
[[advisories]]
name = "FreeBSD-SA-15:04.igmp"
date = "2015-02-25"
[[advisories]]
name = "FreeBSD-SA-15:03.sctp"
date = "2015-01-27"
[[advisories]]
name = "FreeBSD-SA-15:02.kmem"
date = "2015-01-27"
[[advisories]]
name = "FreeBSD-SA-15:01.openssl"
date = "2015-01-14"
[[advisories]]
name = "FreeBSD-SA-14:31.ntp"
date = "2014-12-23"
[[advisories]]
name = "FreeBSD-SA-14:30.unbound"
date = "2014-12-17"
[[advisories]]
name = "FreeBSD-SA-14:29.bind"
date = "2014-12-10"
[[advisories]]
name = "FreeBSD-SA-14:28.file"
date = "2014-12-10"
[[advisories]]
name = "FreeBSD-SA-14:27.stdio"
date = "2014-12-10"
[[advisories]]
name = "FreeBSD-SA-14:26.ftp"
date = "2014-11-04"
[[advisories]]
name = "FreeBSD-SA-14:25.setlogin"
date = "2014-11-04"
[[advisories]]
name = "FreeBSD-SA-14:24.sshd"
date = "2014-11-04"
[[advisories]]
name = "FreeBSD-SA-14:23.openssl"
date = "2014-10-21"
[[advisories]]
name = "FreeBSD-SA-14:22.namei"
date = "2014-10-21"
[[advisories]]
name = "FreeBSD-SA-14:21.routed"
date = "2014-10-21"
[[advisories]]
name = "FreeBSD-SA-14:20.rtsold"
date = "2014-10-21"
[[advisories]]
name = "FreeBSD-SA-14:19.tcp"
date = "2014-09-16"
[[advisories]]
name = "FreeBSD-SA-14:18.openssl"
date = "2014-09-09"
[[advisories]]
name = "FreeBSD-SA-14:17.kmem"
date = "2014-07-08"
[[advisories]]
name = "FreeBSD-SA-14:16.file"
date = "2014-06-24"
[[advisories]]
name = "FreeBSD-SA-14:15.iconv"
date = "2014-06-24"
[[advisories]]
name = "FreeBSD-SA-14:14.openssl"
date = "2014-06-05"
[[advisories]]
name = "FreeBSD-SA-14:13.pam"
date = "2014-06-03"
[[advisories]]
name = "FreeBSD-SA-14:12.ktrace"
date = "2014-06-03"
[[advisories]]
name = "FreeBSD-SA-14:11.sendmail"
date = "2014-06-03"
[[advisories]]
name = "FreeBSD-SA-14:10.openssl"
date = "2014-05-13"
[[advisories]]
name = "FreeBSD-SA-14:09.openssl"
date = "2014-04-30"
[[advisories]]
name = "FreeBSD-SA-14:08.tcp"
date = "2014-04-30"
[[advisories]]
name = "FreeBSD-SA-14:07.devfs"
date = "2014-04-30"
[[advisories]]
name = "FreeBSD-SA-14:06.openssl"
date = "2014-04-08"
[[advisories]]
name = "FreeBSD-SA-14:05.nfsserver"
date = "2014-04-08"
[[advisories]]
name = "FreeBSD-SA-14:04.bind"
date = "2014-01-14"
[[advisories]]
name = "FreeBSD-SA-14:03.openssl"
date = "2014-01-14"
[[advisories]]
name = "FreeBSD-SA-14:02.ntpd"
date = "2014-01-14"
[[advisories]]
name = "FreeBSD-SA-14:01.bsnmpd"
date = "2014-01-14"
[[advisories]]
name = "FreeBSD-SA-13:14.openssh"
date = "2013-11-19"
[[advisories]]
name = "FreeBSD-SA-13:13.nullfs"
date = "2013-09-10"
[[advisories]]
name = "FreeBSD-SA-13:12.ifioctl"
date = "2013-09-10"
[[advisories]]
name = "FreeBSD-SA-13:11.sendfile"
date = "2013-09-10"
[[advisories]]
name = "FreeBSD-SA-13:10.sctp"
date = "2013-08-22"
[[advisories]]
name = "FreeBSD-SA-13:09.ip_multicast"
date = "2013-08-22"
[[advisories]]
name = "FreeBSD-SA-13:08.nfsserver"
date = "2013-07-26"
[[advisories]]
name = "FreeBSD-SA-13:07.bind"
date = "2013-07-26"
[[advisories]]
name = "FreeBSD-SA-13:06.mmap"
date = "2013-06-18"
[[advisories]]
name = "FreeBSD-SA-13:05.nfsserver"
date = "2013-04-29"
[[advisories]]
name = "FreeBSD-SA-13:04.bind"
date = "2013-04-02"
[[advisories]]
name = "FreeBSD-SA-13:03.openssl"
date = "2013-04-02"
[[advisories]]
name = "FreeBSD-SA-13:02.libc"
date = "2013-02-19"
[[advisories]]
name = "FreeBSD-SA-13:01.bind"
date = "2013-02-19"
[[advisories]]
name = "FreeBSD-SA-12:08.linux"
date = "2012-11-22"
[[advisories]]
name = "FreeBSD-SA-12:07.hostapd"
date = "2012-11-22"
[[advisories]]
name = "FreeBSD-SA-12:06.bind"
date = "2012-11-22"
[[advisories]]
name = "FreeBSD-SA-12:05.bind"
date = "2012-08-06"
[[advisories]]
name = "FreeBSD-SA-12:04.sysret"
date = "2012-06-12"
[[advisories]]
name = "FreeBSD-SA-12:03.bind"
date = "2012-06-12"
[[advisories]]
name = "FreeBSD-SA-12:02.crypt"
date = "2012-05-30"
[[advisories]]
name = "FreeBSD-SA-12:01.openssl"
date = "2012-05-30"
[[advisories]]
name = "FreeBSD-SA-11:10.pam"
date = "2011-12-23"
[[advisories]]
name = "FreeBSD-SA-11:09.pam_ssh"
date = "2011-12-23"
[[advisories]]
name = "FreeBSD-SA-11:08.telnetd"
date = "2011-12-23"
[[advisories]]
name = "FreeBSD-SA-11:07.chroot"
date = "2011-12-23"
[[advisories]]
name = "FreeBSD-SA-11:06.bind"
date = "2011-12-23"
[[advisories]]
name = "FreeBSD-SA-11:05.unix"
date = "2011-09-28"
[[advisories]]
name = "FreeBSD-SA-11:04.compress"
date = "2011-09-28"
[[advisories]]
name = "FreeBSD-SA-11:03.bind"
date = "2011-09-28"
[[advisories]]
name = "FreeBSD-SA-11:02.bind"
date = "2011-05-28"
[[advisories]]
name = "FreeBSD-SA-11:01.mountd"
date = "2011-04-20"
[[advisories]]
name = "FreeBSD-SA-10:10.openssl"
date = "2010-11-29"
[[advisories]]
name = "FreeBSD-SA-10:09.pseudofs"
date = "2010-11-10"
[[advisories]]
name = "FreeBSD-SA-10:08.bzip2"
date = "2010-09-20"
[[advisories]]
name = "FreeBSD-SA-10:07.mbuf"
date = "2010-07-13"
[[advisories]]
name = "FreeBSD-SA-10:06.nfsclient"
date = "2010-05-27"
[[advisories]]
name = "FreeBSD-SA-10:05.opie"
date = "2010-05-27"
[[advisories]]
name = "FreeBSD-SA-10:04.jail"
date = "2010-05-27"
[[advisories]]
name = "FreeBSD-SA-10:03.zfs"
date = "2010-01-06"
[[advisories]]
name = "FreeBSD-SA-10:02.ntpd"
date = "2010-01-06"
[[advisories]]
name = "FreeBSD-SA-10:01.bind"
date = "2010-01-06"
[[advisories]]
name = "FreeBSD-SA-09:17.freebsd-update"
date = "2009-12-03"
[[advisories]]
name = "FreeBSD-SA-09:16.rtld"
date = "2009-12-03"
[[advisories]]
name = "FreeBSD-SA-09:15.ssl"
date = "2009-12-03"
[[advisories]]
name = "FreeBSD-SA-09:14.devfs"
date = "2009-10-02"
[[advisories]]
name = "FreeBSD-SA-09:13.pipe"
date = "2009-10-02"
[[advisories]]
name = "FreeBSD-SA-09:12.bind"
date = "2009-07-29"
[[advisories]]
name = "FreeBSD-SA-09:11.ntpd"
date = "2009-06-10"
[[advisories]]
name = "FreeBSD-SA-09:10.ipv6"
date = "2009-06-10"
[[advisories]]
name = "FreeBSD-SA-09:09.pipe"
date = "2009-06-10"
[[advisories]]
name = "FreeBSD-SA-09:08.openssl"
date = "2009-04-22"
[[advisories]]
name = "FreeBSD-SA-09:07.libc"
date = "2009-04-22"
[[advisories]]
name = "FreeBSD-SA-09:06.ktimer"
date = "2009-03-23"
[[advisories]]
name = "FreeBSD-SA-09:05.telnetd"
date = "2009-02-16"
[[advisories]]
name = "FreeBSD-SA-09:04.bind"
date = "2009-01-13"
[[advisories]]
name = "FreeBSD-SA-09:03.ntpd"
date = "2009-01-13"
[[advisories]]
name = "FreeBSD-SA-09:02.openssl"
date = "2009-01-07"
[[advisories]]
name = "FreeBSD-SA-09:01.lukemftpd"
date = "2009-01-07"
[[advisories]]
name = "FreeBSD-SA-08:13.protosw"
date = "2008-12-23"
[[advisories]]
name = "FreeBSD-SA-08:12.ftpd"
date = "2008-12-23"
[[advisories]]
name = "FreeBSD-SA-08:11.arc4random"
date = "2008-11-24"
[[advisories]]
name = "FreeBSD-SA-08:10.nd6"
date = "2008-10-02"
[[advisories]]
name = "FreeBSD-SA-08:09.icmp6"
date = "2008-09-03"
[[advisories]]
name = "FreeBSD-SA-08:08.nmount"
date = "2008-09-03"
[[advisories]]
name = "FreeBSD-SA-08:07.amd64"
date = "2008-09-03"
[[advisories]]
name = "FreeBSD-SA-08:06.bind"
date = "2008-07-13"
[[advisories]]
name = "FreeBSD-SA-08:05.openssh"
date = "2008-04-17"
[[advisories]]
name = "FreeBSD-SA-08:04.ipsec"
date = "2008-02-14"
[[advisories]]
name = "FreeBSD-SA-08:03.sendfile"
date = "2008-02-14"
[[advisories]]
name = "FreeBSD-SA-08:02.libc"
date = "2008-01-14"
[[advisories]]
name = "FreeBSD-SA-08:01.pty"
date = "2008-01-14"
[[advisories]]
name = "FreeBSD-SA-07:10.gtar"
date = "2007-11-29"
[[advisories]]
name = "FreeBSD-SA-07:09.random"
date = "2007-11-29"
[[advisories]]
name = "FreeBSD-SA-07:08.openssl"
date = "2007-10-03"
[[advisories]]
name = "FreeBSD-SA-07:07.bind"
date = "2007-08-01"
[[advisories]]
name = "FreeBSD-SA-07:06.tcpdump"
date = "2007-08-01"
[[advisories]]
name = "FreeBSD-SA-07:05.libarchive"
date = "2007-07-12"
[[advisories]]
name = "FreeBSD-SA-07:04.file"
date = "2007-05-23"
[[advisories]]
name = "FreeBSD-SA-07:03.ipv6"
date = "2007-04-26"
[[advisories]]
name = "FreeBSD-SA-07:02.bind"
date = "2007-02-09"
[[advisories]]
name = "FreeBSD-SA-07:01.jail"
date = "2007-01-11"
[[advisories]]
name = "FreeBSD-SA-06:26.gtar"
date = "2006-12-06"
[[advisories]]
name = "FreeBSD-SA-06:25.kmem"
date = "2006-12-06"
[[advisories]]
name = "FreeBSD-SA-06:24.libarchive"
date = "2006-11-08"
[[advisories]]
name = "FreeBSD-SA-06:22.openssh"
date = "2006-09-30"
[[advisories]]
name = "FreeBSD-SA-06:23.openssl"
date = "2006-09-28"
[[advisories]]
name = "FreeBSD-SA-06:21.gzip"
date = "2006-09-19"
[[advisories]]
name = "FreeBSD-SA-06:20.bind"
date = "2006-09-06"
[[advisories]]
name = "FreeBSD-SA-06:19.openssl"
date = "2006-09-06"
[[advisories]]
name = "FreeBSD-SA-06:18.ppp"
date = "2006-08-23"
[[advisories]]
name = "FreeBSD-SA-06:17.sendmail"
date = "2006-06-14"
[[advisories]]
name = "FreeBSD-SA-06:16.smbfs"
date = "2006-05-31"
[[advisories]]
name = "FreeBSD-SA-06:15.ypserv"
date = "2006-05-31"
[[advisories]]
name = "FreeBSD-SA-06:14.fpu"
date = "2006-04-19"
[[advisories]]
name = "FreeBSD-SA-06:13.sendmail"
date = "2006-03-22"
[[advisories]]
name = "FreeBSD-SA-06:12.opie"
date = "2006-03-22"
[[advisories]]
name = "FreeBSD-SA-06:11.ipsec"
date = "2006-03-22"
[[advisories]]
name = "FreeBSD-SA-06:10.nfs"
date = "2006-03-01"
[[advisories]]
name = "FreeBSD-SA-06:09.openssh"
date = "2006-03-01"
[[advisories]]
name = "FreeBSD-SA-06:08.sack"
date = "2006-02-01"
[[advisories]]
name = "FreeBSD-SA-06:07.pf"
date = "2006-01-25"
[[advisories]]
name = "FreeBSD-SA-06:06.kmem"
date = "2006-01-25"
[[advisories]]
name = "FreeBSD-SA-06:05.80211"
date = "2006-01-18"
[[advisories]]
name = "FreeBSD-SA-06:04.ipfw"
date = "2006-01-11"
[[advisories]]
name = "FreeBSD-SA-06:03.cpio"
date = "2006-01-11"
[[advisories]]
name = "FreeBSD-SA-06:02.ee"
date = "2006-01-11"
[[advisories]]
name = "FreeBSD-SA-06:01.texindex"
date = "2006-01-11"
[[advisories]]
name = "FreeBSD-SA-05:21.openssl"
date = "2005-10-11"
[[advisories]]
name = "FreeBSD-SA-05:20.cvsbug"
date = "2005-09-07"
[[advisories]]
name = "FreeBSD-SA-05:19.ipsec"
date = "2005-07-27"
[[advisories]]
name = "FreeBSD-SA-05:18.zlib"
date = "2005-07-27"
[[advisories]]
name = "FreeBSD-SA-05:17.devfs"
date = "2005-07-20"
[[advisories]]
name = "FreeBSD-SA-05:16.zlib"
date = "2005-07-06"
[[advisories]]
name = "FreeBSD-SA-05:15.tcp"
date = "2005-06-29"
[[advisories]]
name = "FreeBSD-SA-05:14.bzip2"
date = "2005-06-29"
[[advisories]]
name = "FreeBSD-SA-05:13.ipfw"
date = "2005-06-29"
[[advisories]]
name = "FreeBSD-SA-05:12.bind9"
date = "2005-06-09"
[[advisories]]
name = "FreeBSD-SA-05:11.gzip"
date = "2005-06-09"
[[advisories]]
name = "FreeBSD-SA-05:10.tcpdump"
date = "2005-06-09"
[[advisories]]
name = "FreeBSD-SA-05:09.htt"
date = "2005-05-13"
[[advisories]]
name = "FreeBSD-SA-05:08.kmem"
date = "2005-05-06"
[[advisories]]
name = "FreeBSD-SA-05:07.ldt"
date = "2005-05-06"
[[advisories]]
name = "FreeBSD-SA-05:06.iir"
date = "2005-05-06"
[[advisories]]
name = "FreeBSD-SA-05:05.cvs"
date = "2005-04-22"
[[advisories]]
name = "FreeBSD-SA-05:04.ifconf"
date = "2005-04-15"
[[advisories]]
name = "FreeBSD-SA-05:03.amd64"
date = "2005-04-06"
[[advisories]]
name = "FreeBSD-SA-05:02.sendfile"
date = "2005-04-04"
[[advisories]]
name = "FreeBSD-SA-05:01.telnet"
date = "2005-03-28"
[[advisories]]
name = "FreeBSD-SA-04:17.procfs"
date = "2004-12-01"
[[advisories]]
name = "FreeBSD-SA-04:16.fetch"
date = "2004-11-18"
[[advisories]]
name = "FreeBSD-SA-04:15.syscons"
date = "2004-10-04"
[[advisories]]
name = "FreeBSD-SA-04:14.cvs"
date = "2004-09-19"
[[advisories]]
name = "FreeBSD-SA-04:13.linux"
date = "2004-06-30"
[[advisories]]
name = "FreeBSD-SA-04:12.jailroute"
date = "2004-06-07"
[[advisories]]
name = "FreeBSD-SA-04:11.msync"
date = "2004-05-19"
[[advisories]]
name = "FreeBSD-SA-04:10.cvs"
date = "2004-05-19"
[[advisories]]
name = "FreeBSD-SA-04:09.kadmind"
date = "2004-05-05"
[[advisories]]
name = "FreeBSD-SA-04:08.heimdal"
date = "2004-05-05"
[[advisories]]
name = "FreeBSD-SA-04:07.cvs"
date = "2004-04-15"
[[advisories]]
name = "FreeBSD-SA-04:06.ipv6"
date = "2004-03-29"
[[advisories]]
name = "FreeBSD-SA-04:05.openssl"
date = "2004-03-17"
[[advisories]]
name = "FreeBSD-SA-04:04.tcp"
date = "2004-03-02"
[[advisories]]
name = "FreeBSD-SA-04:03.jail"
date = "2004-02-25"
[[advisories]]
name = "FreeBSD-SA-04:02.shmat"
date = "2004-02-05"
[[advisories]]
name = "FreeBSD-SA-04:01.mksnap_ffs"
date = "2004-01-30"
[[advisories]]
name = "FreeBSD-SA-03:19.bind"
date = "2003-11-28"
[[advisories]]
name = "FreeBSD-SA-03:15.openssh"
date = "2003-10-05"
[[advisories]]
name = "FreeBSD-SA-03:18.openssl"
date = "2003-10-03"
[[advisories]]
name = "FreeBSD-SA-03:17.procfs"
date = "2003-10-03"
[[advisories]]
name = "FreeBSD-SA-03:16.filedesc"
date = "2003-10-02"
[[advisories]]
name = "FreeBSD-SA-03:14.arp"
date = "2003-09-23"
[[advisories]]
name = "FreeBSD-SA-03:13.sendmail"
date = "2003-09-17"
[[advisories]]
name = "FreeBSD-SA-03:12.openssh"
date = "2003-09-16"
[[advisories]]
name = "FreeBSD-SA-03:11.sendmail"
date = "2003-08-26"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1170"
[[advisories]]
name = "FreeBSD-SA-03:10.ibcs2"
date = "2003-08-10"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1164"
[[advisories]]
name = "FreeBSD-SA-03:09.signal"
date = "2003-08-10"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1163"
[[advisories]]
name = "FreeBSD-SA-03:08.realpath"
date = "2003-08-03"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1158"
[[advisories]]
name = "FreeBSD-SN-03:02"
date = "2003-04-08"
[[advisories]]
name = "FreeBSD-SN-03:01"
date = "2003-04-07"
[[advisories]]
name = "FreeBSD-SA-03:07.sendmail"
date = "2003-03-30"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1122"
[[advisories]]
name = "FreeBSD-SA-03:06.openssl"
date = "2003-03-21"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1118"
[[advisories]]
name = "FreeBSD-SA-03:05.xdr"
date = "2003-03-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1117"
[[advisories]]
name = "FreeBSD-SA-03:04.sendmail"
date = "2003-03-03"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1112"
[[advisories]]
name = "FreeBSD-SA-03:03.syncookies"
date = "2003-02-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1106"
[[advisories]]
name = "FreeBSD-SA-03:02.openssl"
date = "2003-02-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1105"
[[advisories]]
name = "FreeBSD-SA-03:01.cvs"
date = "2003-02-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1100"
[[advisories]]
name = "FreeBSD-SA-02:44.filedesc"
date = "2003-01-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1090"
[[advisories]]
name = "FreeBSD-SA-02:43.bind"
date = "2002-11-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1084"
[[advisories]]
name = "FreeBSD-SA-02:41.smrsh"
date = "2002-11-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1082"
[[advisories]]
name = "FreeBSD-SA-02:42.resolv"
date = "2002-11-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1083"
[[advisories]]
name = "FreeBSD-SA-02:40.kadmind"
date = "2002-11-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1081"
[[advisories]]
name = "FreeBSD-SN-02:06"
date = "2002-10-10"
[[advisories]]
name = "FreeBSD-SA-02:39.libkvm"
date = "2002-09-16"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1051"
[[advisories]]
name = "FreeBSD-SN-02:05"
date = "2002-08-28"
[[advisories]]
name = "FreeBSD-SA-02:38.signed-error"
date = "2002-08-19"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1041"
[[advisories]]
name = "FreeBSD-SA-02:37.kqueue"
date = "2002-08-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1033"
[[advisories]]
name = "FreeBSD-SA-02:36.nfs"
date = "2002-08-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1032"
[[advisories]]
name = "FreeBSD-SA-02:35.ffs"
date = "2002-08-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1031"
[[advisories]]
name = "FreeBSD-SA-02:33.openssl"
date = "2002-08-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1023"
[[advisories]]
name = "FreeBSD-SA-02:34.rpc"
date = "2002-08-01"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1024"
[[advisories]]
name = "FreeBSD-SA-02:32.pppd"
date = "2002-07-31"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1022"
[[advisories]]
name = "FreeBSD-SA-02:31.openssh"
date = "2002-07-15"
[[advisories]]
name = "FreeBSD-SA-02:30.ktrace"
date = "2002-07-12"
[[advisories]]
name = "FreeBSD-SA-02:29.tcpdump"
date = "2002-07-12"
[[advisories]]
name = "FreeBSD-SA-02:28.resolv"
date = "2002-06-26"
[[advisories]]
name = "FreeBSD-SN-02:04"
date = "2002-06-19"
[[advisories]]
name = "FreeBSD-SA-02:27.rc"
date = "2002-05-29"
[[advisories]]
name = "FreeBSD-SA-02:26.accept"
date = "2002-05-29"
[[advisories]]
name = "FreeBSD-SN-02:03"
date = "2002-05-28"
[[advisories]]
name = "FreeBSD-SA-02:25.bzip2"
date = "2002-05-20"
[[advisories]]
name = "FreeBSD-SA-02:24.k5su"
date = "2002-05-20"
[[advisories]]
name = "FreeBSD-SN-02:02"
date = "2002-05-13"
[[advisories]]
name = "FreeBSD-SA-02:23.stdio"
date = "2002-04-22"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1021"
[[advisories]]
name = "FreeBSD-SA-02:22.mmap"
date = "2002-04-18"
[[advisories]]
name = "FreeBSD-SA-02:21.tcpip"
date = "2002-04-17"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/980"
[[advisories]]
name = "FreeBSD-SA-02:20.syncache"
date = "2002-04-16"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/979"
[[advisories]]
name = "FreeBSD-SN-02:01"
date = "2002-03-30"
[[advisories]]
name = "FreeBSD-SA-02:19.squid"
date = "2002-03-26"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/960"
[[advisories]]
name = "FreeBSD-SA-02:18.zlib"
date = "2002-03-18"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/978"
[[advisories]]
name = "FreeBSD-SA-02:17.mod_frontpage"
date = "2002-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/954"
[[advisories]]
name = "FreeBSD-SA-02:16.netscape"
date = "2002-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/953"
[[advisories]]
name = "FreeBSD-SA-02:15.cyrus-sasl"
date = "2002-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/952"
[[advisories]]
name = "FreeBSD-SA-02:14.pam-pgsql"
date = "2002-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/951"
[[advisories]]
name = "FreeBSD-SA-02:13.openssh"
date = "2002-03-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/945"
[[advisories]]
name = "FreeBSD-SA-02:12.squid"
date = "2002-02-21"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/938"
[[advisories]]
name = "FreeBSD-SA-02:11.snmp"
date = "2002-02-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/936"
[[advisories]]
name = "FreeBSD-SA-02:10.rsync"
date = "2002-02-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/928"
[[advisories]]
name = "FreeBSD-SA-02:09.fstatfs"
date = "2002-02-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/927"
[[advisories]]
name = "FreeBSD-SA-02:08.exec"
date = "2002-01-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/923"
[[advisories]]
name = "FreeBSD-SA-02:07.k5su"
date = "2002-01-18"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/912"
[[advisories]]
name = "FreeBSD-SA-02:06.sudo"
date = "2002-01-16"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/909"
[[advisories]]
name = "FreeBSD-SA-02:05.pine"
date = "2002-01-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/894"
[[advisories]]
name = "FreeBSD-SA-02:04.mutt"
date = "2002-01-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/893"
[[advisories]]
name = "FreeBSD-SA-02:03.mod_auth_pgsql"
date = "2002-01-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/892"
[[advisories]]
name = "FreeBSD-SA-02:02.pw"
date = "2002-01-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/891"
[[advisories]]
name = "FreeBSD-SA-02:01.pkg_add"
date = "2002-01-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/898"
[[advisories]]
name = "FreeBSD-SA-01:64.wu-ftpd"
date = "2001-12-04"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/870"
[[advisories]]
name = "FreeBSD-SA-01:63.openssh"
date = "2001-12-02"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/871"
[[advisories]]
name = "FreeBSD-SA-01:62.uucp"
date = "2001-10-08"
[[advisories]]
name = "FreeBSD-SA-01:61.squid"
date = "2001-10-08"
[[advisories]]
name = "FreeBSD-SA-01:60.procmail"
date = "2001-09-24"
[[advisories]]
name = "FreeBSD-SA-01:59.rmuser"
date = "2001-09-04"
[[advisories]]
name = "FreeBSD-SA-01:58.lpd"
date = "2001-08-30"
[[advisories]]
name = "FreeBSD-SA-01:57.sendmail"
date = "2001-08-27"
[[advisories]]
name = "FreeBSD-SA-01:56.tcp_wrappers"
date = "2001-08-23"
[[advisories]]
name = "FreeBSD-SA-01:55.procfs"
date = "2001-08-21"
[[advisories]]
name = "FreeBSD-SA-01:54.ports-telnetd"
date = "2001-08-20"
[[advisories]]
name = "FreeBSD-SA-01:53.ipfw"
date = "2001-08-17"
[[advisories]]
name = "FreeBSD-SA-01:52.fragment"
date = "2001-08-06"
[[advisories]]
name = "FreeBSD-SA-01:51.openssl"
date = "2001-07-30"
[[advisories]]
name = "FreeBSD-SA-01:50.windowmaker"
date = "2001-07-27"
[[advisories]]
name = "FreeBSD-SA-01:49.telnetd"
date = "2001-07-23"
[[advisories]]
name = "FreeBSD-SA-01:48.tcpdump"
date = "2001-07-17"
[[advisories]]
name = "FreeBSD-SA-01:47.xinetd"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:46.w3m"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:45.samba"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:44.gnupg"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:43.fetchmail"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:42.signal"
date = "2001-07-10"
[[advisories]]
name = "FreeBSD-SA-01:41.hanterm"
date = "2001-07-09"
[[advisories]]
name = "FreeBSD-SA-01:40.fts"
date = "2001-06-04"
[[advisories]]
name = "FreeBSD-SA-01:39.tcp-isn"
date = "2001-05-02"
[[advisories]]
name = "FreeBSD-SA-01:38.sudo"
date = "2001-04-23"
[[advisories]]
name = "FreeBSD-SA-01:37.slrn"
date = "2001-04-23"
[[advisories]]
name = "FreeBSD-SA-01:36.samba"
date = "2001-04-23"
[[advisories]]
name = "FreeBSD-SA-01:35.licq"
date = "2001-04-23"
[[advisories]]
name = "FreeBSD-SA-01:34.hylafax"
date = "2001-04-23"
[[advisories]]
name = "FreeBSD-SA-01:33.ftpd-glob"
date = "2001-04-17"
[[advisories]]
name = "FreeBSD-SA-01:32.ipfilter"
date = "2001-04-16"
[[advisories]]
name = "FreeBSD-SA-01:31.ntpd"
date = "2001-04-06"
[[advisories]]
name = "FreeBSD-SA-01:30.ufs-ext2fs"
date = "2001-03-22"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/738"
[[advisories]]
name = "FreeBSD-SA-01:29.rwhod"
date = "2001-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/732"
[[advisories]]
name = "FreeBSD-SA-01:28.timed"
date = "2001-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/731"
[[advisories]]
name = "FreeBSD-SA-01:27.cfengine"
date = "2001-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/730"
[[advisories]]
name = "FreeBSD-SA-01:26.interbase"
date = "2001-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/729"
[[advisories]]
name = "FreeBSD-SA-01:23.icecast"
date = "2001-03-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/728"
[[advisories]]
name = "FreeBSD-SA-01:25.kerberosIV"
date = "2001-02-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/716"
[[advisories]]
name = "FreeBSD-SA-01:24.ssh"
date = "2001-02-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/715"
[[advisories]]
name = "FreeBSD-SA-01:22.dc20ctrl"
date = "2001-02-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/714"
[[advisories]]
name = "FreeBSD-SA-01:21.ja-elvis"
date = "2001-02-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/713"
[[advisories]]
name = "FreeBSD-SA-01:20.mars_nwe"
date = "2001-02-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/712"
[[advisories]]
name = "FreeBSD-SA-01:19.ja-klock"
date = "2001-02-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/707"
[[advisories]]
name = "FreeBSD-SA-01:18.bind"
date = "2001-01-31"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/706"
[[advisories]]
name = "FreeBSD-SA-01:17.exmh"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/705"
[[advisories]]
name = "FreeBSD-SA-01:16.mysql"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/704"
[[advisories]]
name = "FreeBSD-SA-01:15.tinyproxy"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/703"
[[advisories]]
name = "FreeBSD-SA-01:14.micq"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/702"
[[advisories]]
name = "FreeBSD-SA-01:13.sort"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/701"
[[advisories]]
name = "FreeBSD-SA-01:12.periodic"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/700"
[[advisories]]
name = "FreeBSD-SA-01:11.inetd"
date = "2001-01-29"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/699"
[[advisories]]
name = "FreeBSD-SA-01:10.bind"
date = "2001-01-23"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/698"
[[advisories]]
name = "FreeBSD-SA-01:09.crontab"
date = "2001-01-23"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/697"
[[advisories]]
name = "FreeBSD-SA-01:08.ipfw"
date = "2001-01-23"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/696"
[[advisories]]
name = "FreeBSD-SA-01:07.xfree86"
date = "2001-01-23"
[[advisories]]
name = "FreeBSD-SA-01:06.zope"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/669"
[[advisories]]
name = "FreeBSD-SA-01:05.stunnel"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/668"
[[advisories]]
name = "FreeBSD-SA-01:04.joe"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/667"
[[advisories]]
name = "FreeBSD-SA-01:03.bash1"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/666"
[[advisories]]
name = "FreeBSD-SA-01:02.syslog-ng"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/665"
[[advisories]]
name = "FreeBSD-SA-01:01.openssh"
date = "2001-01-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/664"
[[advisories]]
name = "FreeBSD-SA-00:81.ethereal"
date = "2000-12-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/651"
[[advisories]]
name = "FreeBSD-SA-00:80.halflifeserver"
date = "2000-12-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/650"
[[advisories]]
name = "FreeBSD-SA-00:79.oops"
date = "2000-12-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/649"
[[advisories]]
name = "FreeBSD-SA-00:78.bitchx"
date = "2000-12-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/648"
[[advisories]]
name = "FreeBSD-SA-00:77.procfs"
date = "2000-12-18"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/647"
[[advisories]]
name = "FreeBSD-SA-00:76.tcsh-csh"
date = "2000-11-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/628"
[[advisories]]
name = "FreeBSD-SA-00:75.php"
date = "2000-11-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/627"
[[advisories]]
name = "FreeBSD-SA-00:74.gaim"
date = "2000-11-20"
[[advisories]]
name = "FreeBSD-SA-00:73.thttpd"
date = "2000-11-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/626"
[[advisories]]
name = "FreeBSD-SA-00:72.curl"
date = "2000-11-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/625"
[[advisories]]
name = "FreeBSD-SA-00:71.mgetty"
date = "2000-11-20"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/624"
[[advisories]]
name = "FreeBSD-SA-00:70.ppp-nat"
date = "2000-11-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/623"
[[advisories]]
name = "FreeBSD-SA-00:69.telnetd"
date = "2000-11-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/622"
[[advisories]]
name = "FreeBSD-SA-00:68.ncurses"
date = "2000-11-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/621"
[[advisories]]
name = "FreeBSD-SA-00:67.gnupg"
date = "2000-11-10"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/620"
[[advisories]]
name = "FreeBSD-SA-00:66.netscape"
date = "2000-11-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/619"
[[advisories]]
name = "FreeBSD-SA-00:65.xfce"
date = "2000-11-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/618"
[[advisories]]
name = "FreeBSD-SA-00:64.global"
date = "2000-11-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/617"
[[advisories]]
name = "FreeBSD-SA-00:63.getnameinfo"
date = "2000-11-01"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/589"
[[advisories]]
name = "FreeBSD-SA-00:62.top"
date = "2000-11-01"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/616"
[[advisories]]
name = "FreeBSD-SA-00:61.tcpdump"
date = "2000-10-31"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/615"
[[advisories]]
name = "FreeBSD-SA-00:60.boa"
date = "2000-10-30"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/586"
[[advisories]]
name = "FreeBSD-SA-00:59.pine"
date = "2000-10-30"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/585"
[[advisories]]
name = "FreeBSD-SA-00:58.chpass"
date = "2000-10-30"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/584"
[[advisories]]
name = "FreeBSD-SA-00:57.muh"
date = "2000-10-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/570"
[[advisories]]
name = "FreeBSD-SA-00:56.lprng"
date = "2000-10-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/569"
[[advisories]]
name = "FreeBSD-SA-00:55.xpdf"
date = "2000-10-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/568"
[[advisories]]
name = "FreeBSD-SA-00:54.fingerd"
date = "2000-10-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/567"
[[advisories]]
name = "FreeBSD-SA-00:52.tcp-iss"
date = "2000-10-06"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/561"
[[advisories]]
name = "FreeBSD-SA-00:53.catopen"
date = "2000-09-27"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/562"
[[advisories]]
name = "FreeBSD-SA-00:51.mailman"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/550"
[[advisories]]
name = "FreeBSD-SA-00:50.listmanager"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/549"
[[advisories]]
name = "FreeBSD-SA-00:49.eject"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/548"
[[advisories]]
name = "FreeBSD-SA-00:48.xchat"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/547"
[[advisories]]
name = "FreeBSD-SA-00:47.pine"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/546"
[[advisories]]
name = "FreeBSD-SA-00:46.screen"
date = "2000-09-13"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/545"
[[advisories]]
name = "FreeBSD-SA-00:45.esound"
date = "2000-08-31"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/526"
[[advisories]]
name = "FreeBSD-SA-00:44.xlock"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/523"
[[advisories]]
name = "FreeBSD-SA-00:43.brouted"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/520"
[[advisories]]
name = "FreeBSD-SA-00:42.linux"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/530"
[[advisories]]
name = "FreeBSD-SA-00:41.elf"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/527"
[[advisories]]
name = "FreeBSD-SA-00:40.mopd"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/521"
[[advisories]]
name = "FreeBSD-SA-00:39.netscape"
date = "2000-08-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/528"
[[advisories]]
name = "FreeBSD-SA-00:38.zope"
date = "2000-08-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/525"
[[advisories]]
name = "FreeBSD-SA-00:37.cvsweb"
date = "2000-08-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/524"
[[advisories]]
name = "FreeBSD-SA-00:36.ntop"
date = "2000-08-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/531"
[[advisories]]
name = "FreeBSD-SA-00:35.proftpd"
date = "2000-08-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/522"
[[advisories]]
name = "FreeBSD-SA-00:34.dhclient"
date = "2000-08-14"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/529"
[[advisories]]
name = "FreeBSD-SA-00:33.kerberosIV"
date = "2000-07-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/488"
[[advisories]]
name = "FreeBSD-SA-00:32.bitchx"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/487"
[[advisories]]
name = "FreeBSD-SA-00:31.canna"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/486"
[[advisories]]
name = "FreeBSD-SA-00:30.openssh"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/485"
[[advisories]]
name = "FreeBSD-SA-00:29.wu-ftpd"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/489"
[[advisories]]
name = "FreeBSD-SA-00:28.majordomo"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/484"
[[advisories]]
name = "FreeBSD-SA-00:27.XFree86-4"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/483"
[[advisories]]
name = "FreeBSD-SA-00:26.popper"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/482"
[[advisories]]
name = "FreeBSD-SA-00:24.libedit"
date = "2000-07-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/481"
[[advisories]]
name = "FreeBSD-SA-00:23.ip-options"
date = "2000-06-19"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/480"
[[advisories]]
name = "FreeBSD-SA-00:25.alpha-random"
date = "2000-06-12"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/473"
[[advisories]]
name = "FreeBSD-SA-00:22.apsfilter"
date = "2000-06-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/461"
[[advisories]]
name = "FreeBSD-SA-00:21.ssh"
date = "2000-06-07"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/459"
[[advisories]]
name = "FreeBSD-SA-00:20.krb5"
date = "2000-05-26"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/452"
[[advisories]]
name = "FreeBSD-SA-00:19.semconfig"
date = "2000-05-23"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/451"
[[advisories]]
name = "FreeBSD-SA-00:18.gnapster.knapster"
date = "2000-05-09"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/429"
[[advisories]]
name = "FreeBSD-SA-00:17.libmytinfo"
date = "2000-05-09"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/442"
[[advisories]]
name = "FreeBSD-SA-00:16.golddig"
date = "2000-05-09"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/439"
[[advisories]]
name = "FreeBSD-SA-00:15.imap-uw"
date = "2000-04-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/438"
[[advisories]]
name = "FreeBSD-SA-00:14.imap-uw"
date = "2000-04-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/441"
[[advisories]]
name = "FreeBSD-SA-00:13.generic-nqs"
date = "2000-04-19"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/437"
[[advisories]]
name = "FreeBSD-SA-00:12.healthd"
date = "2000-04-10"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/436"
[[advisories]]
name = "FreeBSD-SA-00:11.ircii"
date = "2000-04-10"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/440"
[[advisories]]
name = "FreeBSD-SA-00:10.orville-write"
date = "2000-03-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408"
[[advisories]]
name = "FreeBSD-SA-00:09.mtr"
date = "2000-03-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408"
[[advisories]]
name = "FreeBSD-SA-00:08.lynx"
date = "2000-03-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/407"
[[advisories]]
name = "FreeBSD-SA-00:07.mh"
date = "2000-03-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/411"
[[advisories]]
name = "FreeBSD-SA-00:06.htdig"
date = "2000-03-01"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/403"
[[advisories]]
name = "FreeBSD-SA-00:05.mysql"
date = "2000-02-28"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/402"
[[advisories]]
name = "FreeBSD-SA-00:04.delegate"
date = "2000-02-19"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/392"
[[advisories]]
name = "FreeBSD-SA-00:03.asmon"
date = "2000-02-19"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/391"
[[advisories]]
name = "FreeBSD-SA-00:02.procfs"
date = "2000-01-24"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/380"
[[advisories]]
name = "FreeBSD-SA-00:01.make"
date = "2000-01-19"
[[advisories]]
name = "FreeBSD-SA-99:06.amd"
date = "1999-09-16"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/318"
[[advisories]]
name = "FreeBSD-SA-99:05.fts"
date = "1999-09-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/313"
[[advisories]]
name = "FreeBSD-SA-99:04.core"
date = "1999-09-15"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/312"
[[advisories]]
name = "FreeBSD-SA-99:03.ftpd"
date = "1999-09-05"
link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/311"
[[advisories]]
name = "FreeBSD-SA-99:02.profil"
date = "1999-09-04"
[[advisories]]
name = "FreeBSD-SA-99:01.chflags"
date = "1999-09-04"
[[advisories]]
name = "FreeBSD-SA-98:08.fragment"
date = "1998-11-04"
[[advisories]]
name = "FreeBSD-SA-98:07.rst"
date = "1998-10-13"
[[advisories]]
name = "FreeBSD-SA-98:06.icmp"
date = "1998-06-10"
[[advisories]]
name = "FreeBSD-SA-98:05.nfs"
date = "1998-06-04"
[[advisories]]
name = "FreeBSD-SA-98:04.mmap"
date = "1998-06-02"
[[advisories]]
name = "FreeBSD-SA-98:03.ttcp"
date = "1998-05-14"
[[advisories]]
name = "FreeBSD-SA-98:02.mmap"
date = "1998-03-12"
[[advisories]]
name = "FreeBSD-SA-97:06.f00f"
date = "1997-12-09"
[[advisories]]
name = "FreeBSD-SA-98:01.land"
date = "1997-12-01"
[[advisories]]
name = "FreeBSD-SA-97:05.open"
date = "1997-10-29"
[[advisories]]
name = "FreeBSD-SA-97:04.procfs"
date = "1997-08-19"
[[advisories]]
name = "FreeBSD-SA-97:03.sysinstall"
date = "1997-04-07"
[[advisories]]
name = "FreeBSD-SA-97:02.lpd"
date = "1997-03-26"
[[advisories]]
name = "FreeBSD-SA-97:01.setlocale"
date = "1997-02-05"
[[advisories]]
name = "FreeBSD-SA-96:21.talkd"
date = "1997-01-18"
[[advisories]]
name = "FreeBSD-SA-96:20.stack-overflow"
date = "1996-12-16"
[[advisories]]
name = "FreeBSD-SA-96:19.modstat"
date = "1996-12-10"
[[advisories]]
name = "FreeBSD-SA-96:18.lpr"
date = "1996-11-25"
[[advisories]]
name = "FreeBSD-SA-96:17.rzsz"
date = "1996-07-16"
[[advisories]]
name = "FreeBSD-SA-96:16.rdist"
date = "1996-07-12"
[[advisories]]
name = "FreeBSD-SA-96:15.ppp"
date = "1996-07-04"
[[advisories]]
name = "FreeBSD-SA-96:12.perl"
date = "1996-06-28"
[[advisories]]
name = "FreeBSD-SA-96:14.ipfw"
date = "1996-06-24"
[[advisories]]
name = "FreeBSD-SA-96:13.comsat"
date = "1996-06-05"
[[advisories]]
name = "FreeBSD-SA-96:11.man"
date = "1996-05-21"
[[advisories]]
name = "FreeBSD-SA-96:10.mount_union"
date = "1996-05-17"
[[advisories]]
name = "FreeBSD-SA-96:09.vfsload"
date = "1996-05-17"
[[advisories]]
name = "FreeBSD-SA-96:02.apache"
date = "1996-04-22"
[[advisories]]
name = "FreeBSD-SA-96:08.syslog"
date = "1996-04-21"
[[advisories]]
name = "FreeBSD-SA-96:01.sliplogin"
date = "1996-04-21"
[[advisories]]
name = "FreeBSD-SA-96:03.sendmail-suggestion"
date = "1996-04-20"
diff --git a/website/data/security/errata.toml b/website/data/security/errata.toml
index f14683655b..1614ad90a8 100644
--- a/website/data/security/errata.toml
+++ b/website/data/security/errata.toml
@@ -1,1095 +1,1107 @@
# Sort errata notices by year, month and day
# $FreeBSD$
+[[notices]]
+name = "FreeBSD-EN-26:10.amd64"
+date = "2026-04-29"
+
+[[notices]]
+name = "FreeBSD-EN-26:09.tzdata"
+date = "2026-04-29"
+
+[[notices]]
+name = "FreeBSD-EN-26:08.pf"
+date = "2026-04-29"
+
[[notices]]
name = "FreeBSD-EN-26:07.pkgbase"
date = "2026-04-21"
[[notices]]
name = "FreeBSD-EN-26:06.timerfd"
date = "2026-04-21"
[[notices]]
name = "FreeBSD-EN-26:05.vm"
date = "2026-04-21"
[[notices]]
name = "FreeBSD-EN-26:04.arm64"
date = "2026-02-10"
[[notices]]
name = "FreeBSD-EN-26:03.vm"
date = "2026-01-27"
[[notices]]
name = "FreeBSD-EN-26:02.arm64"
date = "2026-01-27"
[[notices]]
name = "FreeBSD-EN-26:01.devinfo"
date = "2026-01-27"
[[notices]]
name = "FreeBSD-EN-25:20.vmm"
date = "2025-12-16"
[[notices]]
name = "FreeBSD-EN-25:19.zfs"
date = "2025-12-16"
[[notices]]
name = "FreeBSD-EN-25:18.freebsd-update"
date = "2025-09-30"
[[notices]]
name = "FreeBSD-EN-25:17.bnxt"
date = "2025-09-16"
[[notices]]
name = "FreeBSD-EN-25:16.vfs"
date = "2025-09-16"
[[notices]]
name = "FreeBSD-EN-25:15.arm64"
date = "2025-09-16"
[[notices]]
name = "FreeBSD-EN-25:14.route"
date = "2025-08-08"
[[notices]]
name = "FreeBSD-EN-25:13.wlan_tkip"
date = "2025-08-08"
[[notices]]
name = "FreeBSD-EN-25:12.efi"
date = "2025-08-08"
[[notices]]
name = "FreeBSD-EN-25:11.ena"
date = "2025-07-02"
[[notices]]
name = "FreeBSD-EN-25:10.zfs"
date = "2025-07-02"
[[notices]]
name = "FreeBSD-EN-25:09.libc"
date = "2025-07-02"
[[notices]]
name = "FreeBSD-EN-25:08.caroot"
date = "2025-04-10"
[[notices]]
name = "FreeBSD-EN-25:07.openssl"
date = "2025-04-10"
[[notices]]
name = "FreeBSD-EN-25:06.daemon"
date = "2025-04-10"
[[notices]]
name = "FreeBSD-EN-25:05.expat"
date = "2025-04-10"
[[notices]]
name = "FreeBSD-EN-25:04.tzdata"
date = "2025-04-10"
[[notices]]
name = "FreeBSD-EN-25:03.tzdata"
date = "2025-01-29"
[[notices]]
name = "FreeBSD-EN-25:02.audit"
date = "2025-01-29"
[[notices]]
name = "FreeBSD-EN-25:01.rpc"
date = "2025-01-29"
[[notices]]
name = "FreeBSD-EN-24:17.pam_xdg"
date = "2024-10-29"
[[notices]]
name = "FreeBSD-EN-24:16.pf"
date = "2024-09-19"
[[notices]]
name = "FreeBSD-EN-24:15.calendar"
date = "2024-09-04"
[[notices]]
name = "FreeBSD-EN-24:14.ifconfig"
date = "2024-08-07"
[[notices]]
name = "FreeBSD-EN-24:13.libc++"
date = "2024-06-19"
[[notices]]
name = "FreeBSD-EN-24:12.killpg"
date = "2024-06-19"
[[notices]]
name = "FreeBSD-EN-24:11.ldns"
date = "2024-06-19"
[[notices]]
name = "FreeBSD-EN-24:10.zfs"
date = "2024-06-19"
[[notices]]
name = "FreeBSD-EN-24:09.zfs"
date = "2024-04-24"
[[notices]]
name = "FreeBSD-EN-24:08.kerberos"
date = "2024-03-28"
[[notices]]
name = "FreeBSD-EN-24:07.clang"
date = "2024-03-28"
[[notices]]
name = "FreeBSD-EN-24:06.wireguard"
date = "2024-03-28"
[[notices]]
name = "FreeBSD-EN-24:05.tty"
date = "2024-03-28"
[[notices]]
name = "FreeBSD-EN-24:04.ip"
date = "2024-02-14"
[[notices]]
name = "FreeBSD-EN-24:03.kqueue"
date = "2024-02-14"
[[notices]]
name = "FreeBSD-EN-24:02.libutil"
date = "2024-02-14"
[[notices]]
name = "FreeBSD-EN-24:01.tzdata"
date = "2024-02-14"
[[notices]]
name = "FreeBSD-EN-23:22.vfs"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:21.tty"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:20.vm"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:19.pkgbase"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:18.openzfs"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:17.ossl"
date = "2023-12-05"
[[notices]]
name = "FreeBSD-EN-23:16.openzfs"
date = "2023-12-01"
[[notices]]
name = "FreeBSD-EN-23:15.sanitizer"
date = "2023-12-01"
[[notices]]
name = "FreeBSD-EN-23:14.regcomp"
date = "2023-11-08"
[[notices]]
name = "FreeBSD-EN-23:13.freebsd-update"
date = "2023-11-08"
[[notices]]
name = "FreeBSD-EN-23:12.freebsd-update"
date = "2023-10-03"
[[notices]]
name = "FreeBSD-EN-23:11.caroot"
date = "2023-09-06"
[[notices]]
name = "FreeBSD-EN-23:10.pci"
date = "2023-09-06"
[[notices]]
name = "FreeBSD-EN-23:09.freebsd-update"
date = "2023-09-06"
[[notices]]
name = "FreeBSD-EN-23:08.vnet"
date = "2023-08-01"
[[notices]]
name = "FreeBSD-EN-23:07.mpr"
date = "2023-06-21"
[[notices]]
name = "FreeBSD-EN-23:06.loader"
date = "2023-06-21"
[[notices]]
name = "FreeBSD-EN-23:05.tzdata"
date = "2023-06-21"
[[notices]]
name = "FreeBSD-EN-23:04.ixgbe"
date = "2023-02-08"
[[notices]]
name = "FreeBSD-EN-23:03.ena"
date = "2023-02-08"
[[notices]]
name = "FreeBSD-EN-23:02.sdhci"
date = "2023-02-08"
[[notices]]
name = "FreeBSD-EN-23:01.tzdata"
date = "2023-02-08"
[[notices]]
name = "FreeBSD-EN-22:28.heimdal"
date = "2022-11-29"
[[notices]]
name = "FreeBSD-EN-22:27.loader"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:26.cam"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:25.tcp"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:24.zfs"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:23.vm"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:22.tzdata"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:21.zfs"
date = "2022-11-01"
[[notices]]
name = "FreeBSD-EN-22:20.tzdata"
date = "2022-08-30"
[[notices]]
name = "FreeBSD-EN-22:19.pam_exec"
date = "2022-08-09"
[[notices]]
name = "FreeBSD-EN-22:18.wifi"
date = "2022-08-09"
[[notices]]
name = "FreeBSD-EN-22:17.cam"
date = "2022-08-09"
[[notices]]
name = "FreeBSD-EN-22:16.kqueue"
date = "2022-08-09"
[[notices]]
name = "FreeBSD-EN-22:15.pf"
date = "2022-04-06"
[[notices]]
name = "FreeBSD-EN-22:14.tzdata"
date = "2022-03-22"
[[notices]]
name = "FreeBSD-EN-22:13.zfs"
date = "2022-03-21"
[[notices]]
name = "FreeBSD-EN-22:12.zfs"
date = "2022-03-15"
[[notices]]
name = "FreeBSD-EN-22:11.zfs"
date = "2022-03-15"
[[notices]]
name = "FreeBSD-EN-22:10.zfs"
date = "2022-03-15"
[[notices]]
name = "FreeBSD-EN-22:09.freebsd-update"
date = "2022-03-15"
[[notices]]
name = "FreeBSD-EN-22:08.i386"
date = "2022-02-01"
[[notices]]
name = "FreeBSD-EN-22:07.la57"
date = "2022-02-01"
[[notices]]
name = "FreeBSD-EN-22:06.libalias"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-22:05.tail"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-22:04.pcid"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-22:03.hyperv"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-22:02.xsave"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-22:01.fsck_ffs"
date = "2022-01-11"
[[notices]]
name = "FreeBSD-EN-21:29.tzdata"
date = "2021-11-03"
[[notices]]
name = "FreeBSD-EN-21:28.vmci"
date = "2021-11-03"
[[notices]]
name = "FreeBSD-EN-21:27.caroot"
date = "2021-11-03"
[[notices]]
name = "FreeBSD-EN-21:26.libevent"
date = "2021-11-03"
[[notices]]
name = "FreeBSD-EN-21:25.bhyve"
date = "2021-08-24"
[[notices]]
name = "FreeBSD-EN-21:24.libcrypto"
date = "2021-08-24"
[[notices]]
name = "FreeBSD-EN-21:23.virtio_blk"
date = "2021-08-24"
[[notices]]
name = "FreeBSD-EN-21:22.linux_futex"
date = "2021-06-29"
[[notices]]
name = "FreeBSD-EN-21:21.ipfw"
date = "2021-06-29"
[[notices]]
name = "FreeBSD-EN-21:20.vlan"
date = "2021-06-29"
[[notices]]
name = "FreeBSD-EN-21:19.libcasper"
date = "2021-06-29"
[[notices]]
name = "FreeBSD-EN-21:18.libc++"
date = "2021-06-29"
[[notices]]
name = "FreeBSD-EN-21:17.libradius"
date = "2021-06-01"
[[notices]]
name = "FreeBSD-EN-21:16.bc"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:15.virtio"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:14.pms"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:13.mpt"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:12.divert"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:11.aesni"
date = "2021-05-26"
[[notices]]
name = "FreeBSD-EN-21:10.lldb"
date = "2021-04-06"
[[notices]]
name = "FreeBSD-EN-21:09.pf"
date = "2021-04-06"
[[notices]]
name = "FreeBSD-EN-21:08.freebsd-update"
date = "2021-02-24"
[[notices]]
name = "FreeBSD-EN-21:07.caroot"
date = "2021-02-24"
[[notices]]
name = "FreeBSD-EN-21:06.microcode"
date = "2021-02-24"
[[notices]]
name = "FreeBSD-EN-21:05.libatomic"
date = "2021-01-29"
[[notices]]
name = "FreeBSD-EN-21:04.zfs"
date = "2021-01-29"
[[notices]]
name = "FreeBSD-EN-21:03.vnet"
date = "2021-01-29"
[[notices]]
name = "FreeBSD-EN-21:02.extattr"
date = "2021-01-29"
[[notices]]
name = "FreeBSD-EN-21:01.tzdata"
date = "2021-01-29"
[[notices]]
name = "FreeBSD-EN-20:22.callout"
date = "2020-12-01"
[[notices]]
name = "FreeBSD-EN-20:21.ipfw"
date = "2020-12-01"
[[notices]]
name = "FreeBSD-EN-20:20.tzdata"
date = "2020-12-01"
[[notices]]
name = "FreeBSD-EN-20:19.audit"
date = "2020-12-01"
[[notices]]
name = "FreeBSD-EN-20:18.getfsstat"
date = "2020-09-02"
[[notices]]
name = "FreeBSD-EN-20:17.linuxthread"
date = "2020-09-02"
[[notices]]
name = "FreeBSD-EN-20:16.vmx"
date = "2020-08-05"
[[notices]]
name = "FreeBSD-EN-20:15.mps"
date = "2020-07-08"
[[notices]]
name = "FreeBSD-EN-20:14.linuxkpi"
date = "2020-07-08"
[[notices]]
name = "FreeBSD-EN-20:13.bhyve"
date = "2020-07-08"
[[notices]]
name = "FreeBSD-EN-20:12.iflib"
date = "2020-06-09"
[[notices]]
name = "FreeBSD-EN-20:11.ena"
date = "2020-06-09"
[[notices]]
name = "FreeBSD-EN-20:10.build"
date = "2020-05-12"
[[notices]]
name = "FreeBSD-EN-20:09.igb"
date = "2020-05-12"
[[notices]]
name = "FreeBSD-EN-20:08.tzdata"
date = "2020-05-12"
[[notices]]
name = "FreeBSD-EN-20:07.quotad"
date = "2020-04-21"
[[notices]]
name = "FreeBSD-EN-20:06.ipv6"
date = "2020-03-19"
[[notices]]
name = "FreeBSD-EN-20:05.mlx5en"
date = "2020-03-19"
[[notices]]
name = "FreeBSD-EN-20:04.pfctl"
date = "2020-03-19"
[[notices]]
name = "FreeBSD-EN-20:03.sshd"
date = "2020-03-19"
[[notices]]
name = "FreeBSD-EN-20:02.nmount"
date = "2020-01-28"
[[notices]]
name = "FreeBSD-EN-20:01.ssp"
date = "2020-01-28"
[[notices]]
name = "FreeBSD-EN-19:19.loader"
date = "2019-11-12"
[[notices]]
name = "FreeBSD-EN-19:18.tzdata"
date = "2019-10-23"
[[notices]]
name = "FreeBSD-EN-19:17.ipfw"
date = "2019-08-20"
[[notices]]
name = "FreeBSD-EN-19:16.bhyve"
date = "2019-08-20"
[[notices]]
name = "FreeBSD-EN-19:15.libunwind"
date = "2019-08-06"
[[notices]]
name = "FreeBSD-EN-19:14.epoch"
date = "2019-08-06"
[[notices]]
name = "FreeBSD-EN-19:13.mds"
date = "2019-07-24"
[[notices]]
name = "FreeBSD-EN-19:12.tzdata"
date = "2019-07-02"
[[notices]]
name = "FreeBSD-EN-19:11.net"
date = "2019-06-19"
[[notices]]
name = "FreeBSD-EN-19:10.scp"
date = "2019-05-14"
[[notices]]
name = "FreeBSD-EN-19:09.xinstall"
date = "2019-05-14"
[[notices]]
name = "FreeBSD-EN-19:08.tzdata"
date = "2019-05-14"
[[notices]]
name = "FreeBSD-EN-19:07.lle"
date = "2019-02-05"
[[notices]]
name = "FreeBSD-EN-19:06.dtrace"
date = "2019-02-05"
[[notices]]
name = "FreeBSD-EN-19:05.kqueue"
date = "2019-01-09"
[[notices]]
name = "FreeBSD-EN-19:04.tzdata"
date = "2019-01-09"
[[notices]]
name = "FreeBSD-EN-19:03.sqlite"
date = "2019-01-09"
[[notices]]
name = "FreeBSD-EN-19:02.tcp"
date = "2019-01-09"
[[notices]]
name = "FreeBSD-EN-19:01.cc_cubic"
date = "2019-01-09"
[[notices]]
name = "FreeBSD-EN-18:18.zfs"
date = "2018-12-19"
[[notices]]
name = "FreeBSD-EN-18:17.vm"
date = "2018-12-19"
[[notices]]
name = "FreeBSD-EN-18:16.ptrace"
date = "2018-12-19"
[[notices]]
name = "FreeBSD-EN-18:15.loader"
date = "2018-11-27"
[[notices]]
name = "FreeBSD-EN-18:14.tzdata"
date = "2018-11-27"
[[notices]]
name = "FreeBSD-EN-18:13.icmp"
date = "2018-11-27"
[[notices]]
name = "FreeBSD-EN-18:12.mem"
date = "2018-09-27"
[[notices]]
name = "FreeBSD-EN-18:11.listen"
date = "2018-09-27"
[[notices]]
name = "FreeBSD-EN-18:10.syscall"
date = "2018-09-27"
[[notices]]
name = "FreeBSD-EN-18:09.ip"
date = "2018-09-27"
[[notices]]
name = "FreeBSD-EN-18:08.lazyfpu"
date = "2018-09-12"
[[notices]]
name = "FreeBSD-EN-18:07.pmap"
date = "2018-06-21"
[[notices]]
name = "FreeBSD-EN-18:06.tzdata"
date = "2018-05-08"
[[notices]]
name = "FreeBSD-EN-18:05.mem"
date = "2018-05-08"
[[notices]]
name = "FreeBSD-EN-18:04.mem"
date = "2018-04-04"
[[notices]]
name = "FreeBSD-EN-18:03.tzdata"
date = "2018-04-04"
[[notices]]
name = "FreeBSD-EN-18:02.file"
date = "2018-03-07"
[[notices]]
name = "FreeBSD-EN-18:01.tzdata"
date = "2018-03-07"
[[notices]]
name = "FreeBSD-EN-17:09.tzdata"
date = "2017-11-02"
[[notices]]
name = "FreeBSD-EN-17:08.pf"
date = "2017-08-10"
[[notices]]
name = "FreeBSD-EN-17:07.vnet"
date = "2017-08-10"
[[notices]]
name = "FreeBSD-EN-17:06.hyperv"
date = "2017-07-12"
[[notices]]
name = "FreeBSD-EN-17:05.xen"
date = "2017-04-12"
[[notices]]
name = "FreeBSD-EN-17:04.mandoc"
date = "2017-02-23"
[[notices]]
name = "FreeBSD-EN-17:03.hyperv"
date = "2017-02-23"
[[notices]]
name = "FreeBSD-EN-17:02.yp"
date = "2017-02-23"
[[notices]]
name = "FreeBSD-EN-17:01.pcie"
date = "2017-02-23"
[[notices]]
name = "FreeBSD-EN-16:21.localedef"
date = "2016-12-06"
[[notices]]
name = "FreeBSD-EN-16:20.tzdata"
date = "2016-12-06"
[[notices]]
name = "FreeBSD-EN-16:19.tzcode"
date = "2016-12-06"
[[notices]]
name = "FreeBSD-EN-16:18.loader"
date = "2016-10-25"
[[notices]]
name = "FreeBSD-EN-16:17.vm"
date = "2016-10-25"
[[notices]]
name = "FreeBSD-EN-16:16.hv_storvsc"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:15.vmbus"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:14.hv_storvsc"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:13.vmbus"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:12.hv_storvsc"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:11.vmbus"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:10.dhclient"
date = "2016-08-12"
[[notices]]
name = "FreeBSD-EN-16:09.freebsd-update"
date = "2016-07-25"
[[notices]]
name = "FreeBSD-EN-16:08.zfs"
date = "2016-05-04"
[[notices]]
name = "FreeBSD-EN-16:07.ipi"
date = "2016-05-04"
[[notices]]
name = "FreeBSD-EN-16:06.libc"
date = "2016-05-04"
[[notices]]
name = "FreeBSD-EN-16:05.hv_netvsc"
date = "2016-03-16"
[[notices]]
name = "FreeBSD-EN-16:04.hyperv"
date = "2016-03-16"
[[notices]]
name = "FreeBSD-EN-16:03.yplib"
date = "2016-01-14"
[[notices]]
name = "FreeBSD-EN-16:02.pf"
date = "2016-01-14"
[[notices]]
name = "FreeBSD-EN-16:01.filemon"
date = "2016-01-14"
[[notices]]
name = "FreeBSD-EN-15:20.vm"
date = "2015-11-04"
[[notices]]
name = "FreeBSD-EN-15:19.kqueue"
date = "2015-11-04"
[[notices]]
name = "FreeBSD-EN-15:18.pkg"
date = "2015-09-16"
[[notices]]
name = "FreeBSD-EN-15:17.libc"
date = "2015-09-16"
[[notices]]
name = "FreeBSD-EN-15:16.pw"
date = "2015-09-16"
[[notices]]
name = "FreeBSD-EN-15:15.pkg"
date = "2015-08-25"
[[notices]]
name = "FreeBSD-EN-15:14.ixgbe"
date = "2015-08-25"
[[notices]]
name = "FreeBSD-EN-15:13.vidcontrol"
date = "2015-08-18"
[[notices]]
name = "FreeBSD-EN-15:12.netstat"
date = "2015-08-18"
[[notices]]
name = "FreeBSD-EN-15:11.toolchain"
date = "2015-08-18"
[[notices]]
name = "FreeBSD-EN-15:10.iconv"
date = "2015-06-30"
[[notices]]
name = "FreeBSD-EN-15:09.xlocale"
date = "2015-06-30"
[[notices]]
name = "FreeBSD-EN-15:08.sendmail"
date = "2015-06-18"
[[notices]]
name = "FreeBSD-EN-15:07.zfs"
date = "2015-06-09"
[[notices]]
name = "FreeBSD-EN-15:06.file"
date = "2015-06-09"
[[notices]]
name = "FreeBSD-EN-15:05.ufs"
date = "2015-05-13"
[[notices]]
name = "FreeBSD-EN-15:04.freebsd-update"
date = "2015-05-13"
[[notices]]
name = "FreeBSD-EN-15:03.freebsd-update"
date = "2015-02-25"
[[notices]]
name = "FreeBSD-EN-15:02.openssl"
date = "2015-02-25"
[[notices]]
name = "FreeBSD-EN-15:01.vt"
date = "2015-02-25"
[[notices]]
name = "FreeBSD-EN-14:13.freebsd-update"
date = "2014-12-23"
[[notices]]
name = "FreeBSD-EN-14:12.zfs"
date = "2014-11-04"
[[notices]]
name = "FreeBSD-EN-14:11.crypt"
date = "2014-10-22"
[[notices]]
name = "FreeBSD-EN-14:10.tzdata"
date = "2014-10-22"
[[notices]]
name = "FreeBSD-EN-14:09.jail"
date = "2014-07-08"
[[notices]]
name = "FreeBSD-EN-14:08.heimdal"
date = "2014-06-24"
[[notices]]
name = "FreeBSD-EN-14:07.pmap"
date = "2014-06-24"
[[notices]]
name = "FreeBSD-EN-14:06.exec"
date = "2014-06-03"
[[notices]]
name = "FreeBSD-EN-14:05.ciss"
date = "2014-05-13"
[[notices]]
name = "FreeBSD-EN-14:04.kldxref"
date = "2014-05-13"
[[notices]]
name = "FreeBSD-EN-14:03.pkg"
date = "2014-05-13"
[[notices]]
name = "FreeBSD-EN-14:02.mmap"
date = "2014-01-14"
[[notices]]
name = "FreeBSD-EN-14:01.random"
date = "2014-01-14"
[[notices]]
name = "FreeBSD-EN-13:05.freebsd-update"
date = "2013-11-28"
[[notices]]
name = "FreeBSD-EN-13:04.freebsd-update"
date = "2013-10-26"
[[notices]]
name = "FreeBSD-EN-13:03.mfi"
date = "2013-08-22"
[[notices]]
name = "FreeBSD-EN-13:01.fxp"
date = "2013-06-28"
[[notices]]
name = "FreeBSD-EN-13:02.vtnet"
date = "2013-06-28"
[[notices]]
name = "FreeBSD-EN-12:02.ipv6refcount"
date = "2012-06-12"
[[notices]]
name = "FreeBSD-EN-12:01.freebsd-update"
date = "2012-01-04"
[[notices]]
name = "FreeBSD-EN-10:02.sched_ule"
date = "2010-02-27"
[[notices]]
name = "FreeBSD-EN-10:01.freebsd"
date = "2010-01-06"
[[notices]]
name = "FreeBSD-EN-09:05.null"
date = "2009-10-02"
[[notices]]
name = "FreeBSD-EN-09:04.fork"
date = "2009-06-24"
[[notices]]
name = "FreeBSD-EN-09:03.fxp"
date = "2009-06-24"
[[notices]]
name = "FreeBSD-EN-09:02.bce"
date = "2009-06-24"
[[notices]]
name = "FreeBSD-EN-09:01.kenv"
date = "2009-03-23"
[[notices]]
name = "FreeBSD-EN-08:02.tcp"
date = "2008-06-19"
[[notices]]
name = "FreeBSD-EN-08:01.libpthread"
date = "2008-04-17"
[[notices]]
name = "FreeBSD-EN-07:05.freebsd-update"
date = "2007-03-15"
[[notices]]
name = "FreeBSD-EN-07:04.zoneinfo"
date = "2007-02-28"
[[notices]]
name = "FreeBSD-EN-07:03.rc.d_jail"
date = "2007-02-28"
[[notices]]
name = "FreeBSD-EN-07:02.net"
date = "2007-02-28"
[[notices]]
name = "FreeBSD-EN-07:01.nfs"
date = "2007-02-14"
[[notices]]
name = "FreeBSD-EN-06:02.net"
date = "2006-08-28"
[[notices]]
name = "FreeBSD-EN-06:01.jail"
date = "2006-07-07"
[[notices]]
name = "FreeBSD-EN-05:04.nfs"
date = "2005-12-19"
[[notices]]
name = "FreeBSD-EN-05:03.ipi"
date = "2005-01-16"
[[notices]]
name = "FreeBSD-EN-05:02.sk"
date = "2005-01-06"
[[notices]]
name = "FreeBSD-EN-05:01.nfs"
date = "2005-01-05"
[[notices]]
name = "FreeBSD-EN-04:01.twe"
date = "2004-06-28"
diff --git a/website/static/security/advisories/FreeBSD-EN-26:08.pf.asc b/website/static/security/advisories/FreeBSD-EN-26:08.pf.asc
new file mode 100644
index 0000000000..c5a4f42406
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-EN-26:08.pf.asc
@@ -0,0 +1,139 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-EN-26:08.pf Errata Notice
+ The FreeBSD Project
+
+Topic: Incorrect duplicate rule detection for automatic tables
+
+Category: core
+Module: pf
+Announced: 2026-04-29
+Credits: Michael Sinatra
+Affects: FreeBSD 15.0
+Corrected: 2026-04-26 10:12:28 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:24 UTC (releng/15.0, 15.0-RELEASE-p7)
+
+For general information regarding FreeBSD Errata Notices and Security
+Advisories, including descriptions of the fields above, security
+branches, and the following sections, please visit
+.
+
+I. Background
+
+pf is an Internet Protocol packet filter originally written for OpenBSD.
+While loading its configuration, pf hashes rules and silently drops
+duplicates as an optimisation. Only the first rule with the same hash is
+considered.
+
+II. Problem Description
+
+While checking for duplicate rules pf did not distinguish automatically
+created tables from each other. As a result some of those rules may have
+unexpectedly not been loaded.
+
+III. Impact
+
+The ruleset loaded in the kernel might not match the configured ruleset.
+
+IV. Workaround
+
+This problem only affects rules with tables created by the pfctl rules
+optimiser. Either disable ruleset optimisation ('set ruleset-optimization
+none'), or avoid constructs which would be optimisised into a table (e.g. by
+manually creating such tables).
+
+V. Solution
+
+Upgrade your system to a supported FreeBSD stable or release / security
+branch (releng) dated after the correction date, and reboot the system.
+
+Perform one of the following:
+
+1) To update your system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+# shutdown -r now
+
+2) To update your system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r now
+
+3) To update your system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/EN-26:08/pf.patch
+# fetch https://security.FreeBSD.org/patches/EN-26:08/pf.patch.asc
+# gpg --verify pf.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+ and reboot the
+system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ fdcc60f52841 stable/15-n283345
+releng/15.0/ d91d13c12484 releng/15.0-n281025
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=7VtI
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-EN-26:09.tzdata.asc b/website/static/security/advisories/FreeBSD-EN-26:09.tzdata.asc
new file mode 100644
index 0000000000..09b3d387db
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-EN-26:09.tzdata.asc
@@ -0,0 +1,179 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-EN-26:09.tzdata Errata Notice
+ The FreeBSD Project
+
+Topic: Timezone database information update
+
+Category: contrib
+Module: zoneinfo
+Announced: 2026-04-29
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-03-05 01:36:15 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:25 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-03-05 01:33:16 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:38 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:18 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-03-05 01:33:52 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:16 UTC (releng/13.5, 13.5-RELEASE-p13)
+
+For general information regarding FreeBSD Errata Notices and Security
+Advisories, including descriptions of the fields above, security
+branches, and the following sections, please visit
+.
+
+I. Background
+
+The IANA Time Zone Database (often called tz or zoneinfo) contains code and
+data that represent the history of local time for many representative
+locations around the globe. It is updated periodically to reflect changes
+made by political bodies to time zone boundaries, UTC offsets, and
+daylight-saving rules.
+
+FreeBSD releases install the IANA Time Zone Database in /usr/share/zoneinfo.
+The tzsetup(8) utility allows the user to specify the default local time
+zone. Based on the selected time zone, tzsetup(8) copies one of the files
+from /usr/share/zoneinfo to /etc/localtime. A time zone may also be selected
+for an individual process by setting its TZ environment variable to a desired
+time zone name.
+
+II. Problem Description
+
+Several changes to future and past timestamps have been recorded in the IANA
+Time Zone Database after previous FreeBSD releases were released. This
+affects many users in different parts of the world. Because of these
+changes, the data in the zoneinfo files need to be updated. If the local
+timezone on the running system is affected, tzsetup(8) needs to be run to
+update /etc/localtime.
+
+III. Impact
+
+An incorrect time will be displayed on a system configured to use one of the
+affected time zones if the /usr/share/zoneinfo and /etc/localtime files are
+not updated, and all applications on the system that rely on the system time,
+such as cron(8) and syslog(8), will be affected.
+
+IV. Workaround
+
+The system administrator can install an updated version of the IANA Time Zone
+Database from the misc/zoneinfo port and run tzsetup(8).
+
+Applications that store and display times in Coordinated Universal Time (UTC)
+are not affected.
+
+V. Solution
+
+Upgrade your system to a supported FreeBSD stable or release / security
+branch (releng) dated after the correction date.
+
+Please note that some third party software, for instance PHP, Ruby, Java,
+Perl and Python, may be using different zoneinfo data sources, in such cases
+this software must be updated separately. Software packages that are
+installed via binary packages can be upgraded by executing 'pkg upgrade'.
+
+Following the instructions in this Errata Notice will only update the IANA
+Time Zone Database installed in /usr/share/zoneinfo.
+
+Perform one of the following:
+
+1) To update your system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+
+2) To update your system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+3) To update your system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+[FreeBSD 13.5, FreeBSD 14.3, and FreeBSD 15.0]
+# fetch https://security.FreeBSD.org/patches/EN-26:09/tzdata-2026b.patch
+# fetch https://security.FreeBSD.org/patches/EN-26:09/tzdata-2026b.patch.asc
+# gpg --verify tzdata-2026b.patch.asc
+
+[FreeBSD 14.4]
+# fetch https://security.FreeBSD.org/patches/EN-26:09/tzdata-2026b-144.patch
+# fetch https://security.FreeBSD.org/patches/EN-26:09/tzdata-2026b-144.patch.asc
+# gpg --verify tzdata-2026b-144.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in .
+
+Restart all the affected applications and daemons, or reboot the system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 564480f108e7 stable/15-n282573
+releng/15.0/ 183f96697f82 releng/15.0-n281026
+stable/14/ 4830cb713ed8 stable/14-n273807
+releng/14.4/ 677aeab69b13 releng/14.4-n273688
+releng/14.3/ 1d3ca32f88f2 releng/14.3-n271488
+stable/13/ c0b2aff48ff3 stable/13-n259815
+releng/13.5/ f7e6b9f128e3 releng/13.5-n259213
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=Mc5t
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-EN-26:10.amd64.asc b/website/static/security/advisories/FreeBSD-EN-26:10.amd64.asc
new file mode 100644
index 0000000000..30eff34440
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-EN-26:10.amd64.asc
@@ -0,0 +1,155 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-EN-26:10.amd64 Errata Notice
+ The FreeBSD Project
+
+Topic: TLB invalidation bug on AMD systems with INVLPGB
+
+Category: core
+Module: vm
+Announced: 2026-04-29
+Affects: FreeBSD 14.3 and later
+Corrected: 2026-04-23 13:48:45 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:26 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-23 13:49:23 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:39 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:19 UTC (releng/14.3, 14.3-RELEASE-p12)
+
+For general information regarding FreeBSD Errata Notices and Security
+Advisories, including descriptions of the fields above, security
+branches, and the following sections, please visit
+.
+
+I. Background
+
+On multi-core systems, TLB invalidation operations must notify other cores,
+as each core maintains a local TLB. On amd64 systems this has historically
+been implemented using interprocessor interrupts. Recent AMD CPUs provide
+a new instruction, invlpgb, which allows a core to broadcast TLB invalidations
+to other cores without need to explicitly raise interrupts. The FreeBSD kernel
+makes use of this instruction when available.
+
+II. Problem Description
+
+The FreeBSD implementation of ranged TLB invalidation took advantage of a bit
+in an invlpgb operand to invalidate consecutive 2M entries, instead of
+invalidating purely in increments of 4K pages. The hardware invlpgb
+implementation uses the underlying page size to invalidate regardless of the
+status of this bit, which may leave a series of 4K mappings intact that should
+have been invalidated.
+
+III. Impact
+
+Failing to invalidate pages when it required may result in apparent kernel
+memory corruption, typically resulting in a kernel panic. Workloads involving
+heavy use of kqueue(2) and/or large file descriptor tables seem to trigger
+the problem somewhat readily.
+
+IV. Workaround
+
+Intel and non-x86 systems are not affected.
+
+AMD systems that support INVLPGB (reported during the kernel boot process in
+"AMD Extended Feature Extensions ID EBX") may set vm.pmap.invlpgb_works=0 in
+/boot/loader.conf to work around this issue by disabling the use of invlpgb.
+
+V. Solution
+
+Upgrade your system to a supported FreeBSD stable or release / security
+branch (releng) dated after the correction date, and reboot the system.
+
+Perform one of the following:
+
+1) To update your system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+3) To update your system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/EN-26:10/amd64.patch
+# fetch https://security.FreeBSD.org/patches/EN-26:10/amd64.patch.asc
+# gpg --verify amd64.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+ and reboot the
+system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 280cfe2264d7 stable/15-n283199
+releng/15.0/ 182c59658218 releng/15.0-n281027
+stable/14/ ff11ae166cd9 stable/14-n274021
+releng/14.4/ b00785205990 releng/14.4-n273689
+releng/14.3/ 3b1365cb816e releng/14.3-n271489
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=pWDj
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:12.dhclient.asc b/website/static/security/advisories/FreeBSD-SA-26:12.dhclient.asc
new file mode 100644
index 0000000000..531af13cae
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:12.dhclient.asc
@@ -0,0 +1,155 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:12.dhclient Security Advisory
+ The FreeBSD Project
+
+Topic: Remote code execution via malicious DHCP options
+
+Category: core
+Module: dhclient
+Announced: 2026-04-29
+Credits: Joshua Rogers of AISLE Research Team
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:47 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:28 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:50 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:41 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:22 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:06 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:18 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-42511
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+dhclient(8) is the default IPv4 DHCP client used on FreeBSD. It is
+responsible for contacting DHCP servers on a network segment and for
+initialising and configuring network interfaces based on received
+information.
+
+II. Problem Description
+
+The BOOTP file field is written to the lease file without escaping embedded
+double-quotes, allowing injection of arbitrary dhclient.conf directives.
+When the lease file is subsequently re-parsed by dhclient, e.g., after a
+system restart, an attacker-controlled field from the lease is passed to
+dhclient-script(8), which evaluates it.
+
+III. Impact
+
+A rogue DHCP server may be able to execute arbirary code as root on a system
+running dhclient.
+
+IV. Workaround
+
+No workaround is available. Systems not running dhclient(8) are not
+affected.
+
+The attacker needs to be on the same broadcast domain and respond to DHCP
+requests. A well-managed network will configure DHCP snooping on switches to
+prevent rogue DHCP servers from operating.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date.
+
+Perform one of the following:
+
+1) To update your vulnerable system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+
+2) To update your vulnerable system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+3) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-26:12/dhclient.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:12/dhclient.patch.asc
+# gpg --verify dhclient.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in .
+
+Restart the applicable daemons, or reboot the system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 2621f6c5d4ae stable/15-n283377
+releng/15.0/ e7b4fb41aafa releng/15.0-n281029
+stable/14/ b3087e05e848 stable/14-n274076
+releng/14.4/ 73b801e3b5b3 releng/14.4-n273691
+releng/14.3/ dda71167a101 releng/14.3-n271492
+stable/13/ 46c01e4dd102 stable/13-n259859
+releng/13.5/ a2d45189b9ee releng/13.5-n259215
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+
+iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmnySScbFIAAAAAABAAO
+bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrv/HEQANr71RMaW0408Cp2xZ/n
+DN8DsU7vCXPDcZWF/HAl+COurXipEycxnP6pBdm2uCqRGWXmNPkjyA5nyoAM2qYP
+9b3rXQHKdrqc0vvbjJuahzqfttwcv1jFQp+8Z8N8TYWUnETprai5VOwZ+7p2caGC
+gZg3UkS8qx7+qUZn1c1nOpYgW7AE1cxuBzSM3O/4pyaSnnMGgeUcz/utv+F272rn
+/rdDaC1nvH09OKIJOqBxOQ7m7izTBu70P1zhuWmGDAzmvy1sNCUpv325iFBc7B78
+fRvINps878aSqheJqIx2jpeykW+nBjbVpsh++0ZUNjoWQTbZM7WaxNJxD4KjdInW
+zvK24qX34aMrY4pS0BjpQ46RTkEIDFnzSYTUAN+33LQ9rQ+1DaUF0UJAlO10XBQ+
+6J1ZDXnSmqOsXu2pnRyXWKrsliz6+j3LOzkJoc2gQFwiDzex20ZJtO3Jd2dVMJ5a
+F/jN5SY800LhvCbPFPL4k03xK98n7fLs432jsJOMYtRvY9N62oEbufBj0dCS0S15
+A7Vj537ziRZuGt4xz3vdE48GEBdxm+frPNadS8IurW1gDN4Rr0d5VLfKFwMsiSXr
+baVMWTjn6kcfpomYDhl5451lDAyhZ20qFxx9M1lRNj7ploz4khmdv1e1zqENocQd
+t4eQrptk4YUgxEIZ0R56b2qf
+=h/Vp
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:13.exec.asc b/website/static/security/advisories/FreeBSD-SA-26:13.exec.asc
new file mode 100644
index 0000000000..3d9a0ea526
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:13.exec.asc
@@ -0,0 +1,150 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:13.exec Security Advisory
+ The FreeBSD Project
+
+Topic: Local privilege escalation via execve()
+
+Category: core
+Module: execve(2)
+Announced: 2026-04-29
+Credits: Ryan Austin of Calif.io
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:46 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:27 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:49 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:40 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:21 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:05 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:17 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-7270
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+execve(2) is a system call is used to launch an executable image, including
+scripts prefixed with a path to the interpreter. The system call takes a
+path to the image as a parameter, followed by extra arguments and environment
+variables to be passed to the new image.
+
+II. Problem Description
+
+An operator precedence bug in the kernel results in a scenario where a buffer
+overflow causes attacker-controlled data to overwrite adjacent execve(2)
+argument buffers.
+
+III. Impact
+
+The bug may be exploitable by an unprivileged user to obtain superuser
+privileges.
+
+IV. Workaround
+
+No workaround is available.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date,
+and reboot the system.
+
+Perform one of the following:
+
+1) To update your vulnerable system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your vulnerable system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+3) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-26:13/exec.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:13/exec.patch.asc
+# gpg --verify exec.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+ and reboot the
+system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ c3e943e78e06 stable/15-n283376
+releng/15.0/ 934b48683c4f releng/15.0-n281028
+stable/14/ ae00a52921ca stable/14-n274075
+releng/14.4/ 943aa64ba91a releng/14.4-n273690
+releng/14.3/ f04c40607b8f releng/14.3-n271491
+stable/13/ d619e3a3c0ec stable/13-n259858
+releng/13.5/ 7c5c37ac8f8f releng/13.5-n259214
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=YAct
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:14.pf.asc b/website/static/security/advisories/FreeBSD-SA-26:14.pf.asc
new file mode 100644
index 0000000000..c5d889135b
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:14.pf.asc
@@ -0,0 +1,168 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:14.pf Security Advisory
+ The FreeBSD Project
+
+Topic: pf can overflow the stack parsing crafted SCTP packets
+
+Category: core
+Module: pf
+Announced: 2026-04-29
+Credits: Igor Gabriel Sousa e Souza
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:50 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:30 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:52 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:44 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:20 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:08 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:20 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-7164
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+pf is an Internet Protocol packet filter originally written for OpenBSD.
+SCTP is a transport protocol with multihome support.
+
+pf parses SCTP packets to discover additional addresses for SCTP endpoints,
+allowing it to create states allowing connections between these additional
+addresses.
+
+II. Problem Description
+
+Incorrect packet validation allowed unbounded recursion parsing SCTP chunk
+parameters. This can eventually result in a stack overflow and panic.
+
+III. Impact
+
+Remote attackers can craft packets which cause affected systems to panic.
+This affects any system where pf is configured to process traffic,
+independent of the configured ruleset.
+
+IV. Workaround
+
+No workaround is available. Systems not using pf are not affected.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date,
+and reboot the system.
+
+Perform one of the following:
+
+1) To update your vulnerable system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your vulnerable system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+3) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+[FreeBSD 15.0]
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-150.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-150.patch.asc
+# gpg --verify pf-150.patch.asc
+
+[FreeBSD 14.4]
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-144.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-144.patch.asc
+# gpg --verify pf-144.patch.asc
+
+[FreeBSD 14.3]
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-143.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-143.patch.asc
+# gpg --verify pf-143.patch.asc
+
+[FreeBSD 13.5]
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-135.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:14/pf-135.patch.asc
+# gpg --verify pf-135.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+ and reboot the
+system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ e1c9f92130e8 stable/15-n283379
+releng/15.0/ c01d9bcf0cf6 releng/15.0-n281031
+stable/14/ ba21845e94dd stable/14-n274078
+releng/14.4/ 0cbe512c7a80 releng/14.4-n273693
+releng/14.3/ 63495b09ccf5 releng/14.3-n271490
+stable/13/ ed0e766f1256 stable/13-n259861
+releng/13.5/ 0ab05345fb40 releng/13.5-n259217
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=dRoD
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:15.dhclient.asc b/website/static/security/advisories/FreeBSD-SA-26:15.dhclient.asc
new file mode 100644
index 0000000000..eea9108dc8
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:15.dhclient.asc
@@ -0,0 +1,159 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:15.dhclient Security Advisory
+ The FreeBSD Project
+
+Topic: Remotely triggerable out-of-bounds heap write in dhclient
+
+Category: core
+Module: dhclient
+Announced: 2026-04-29
+Credits: Joshua Rogers of AISLE Research Team
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:49 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:29 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:51 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:42 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:24 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:07 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:19 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-42512
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+dhclient(8) is the default IPv4 DHCP client used on FreeBSD. It is
+responsible for contacting DHCP servers on a network segment and for
+initialising and configuring network interfaces based on received
+information.
+
+When processing a DHCP offer, dhclient passes various parameters provided by
+the server to dhclient-script(8). DHCP options, as documented in
+dhcp-options(5), are passed via the environment.
+
+II. Problem Description
+
+As dhclient is building an environment to pass to dhclient-script, it may
+need to resize the array of string pointers. The code which expands the
+array incorrectly calculates its new size when requesting memory, resulting
+in a heap buffer overrun.
+
+III. Impact
+
+A specially crafted packet can cause dhclient to overrun its buffer of
+environment entries. This can result in a crash, but it may be possible to
+leverage this bug to achieve remote code execution.
+
+IV. Workaround
+
+No workaround is available. Systems not running dhclient(8) are not
+affected.
+
+The attacker needs to be on the same broadcast domain and respond to DHCP
+requests. A well-managed network will configure DHCP snooping on switches to
+prevent rogue DHCP servers from operating.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date.
+
+Perform one of the following:
+
+1) To update your vulnerable system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+
+2) To update your vulnerable system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+3) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-26:15/dhclient.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:15/dhclient.patch.asc
+# gpg --verify dhclient.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in .
+
+Restart the applicable daemons, or reboot the system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 4408b683d237 stable/15-n283378
+releng/15.0/ 66d6c32ce7b8 releng/15.0-n281030
+stable/14/ a813012f4b76 stable/14-n274077
+releng/14.4/ d60456d859a1 releng/14.4-n273692
+releng/14.3/ 76734958a098 releng/14.3-n271493
+stable/13/ 5d3e93fda7ce stable/13-n259860
+releng/13.5/ 5a5e7883a3bb releng/13.5-n259216
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=rnNn
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:16.libnv.asc b/website/static/security/advisories/FreeBSD-SA-26:16.libnv.asc
new file mode 100644
index 0000000000..7cf5e02322
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:16.libnv.asc
@@ -0,0 +1,152 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:16.libnv Security Advisory
+ The FreeBSD Project
+
+Topic: Stack overflow via select() file descriptor set overflow
+
+Category: core
+Module: libnv
+Announced: 2026-04-29
+Credits: Joshua Rogers of AISLE Research Team
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:51 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:32 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:56 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:47 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:27 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:09 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:21 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-39457
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+libnv is a general-purpose library designed for storing and exchanging sets
+of name-value pairs. This library can serve as an Inter-Process
+Communication (IPC) framework, enabling processes to exchange data and file
+descriptors. For example, it is used in libcasper to establish communication
+between privileged and unprivileged processes. Additionally, libnv can
+function as an interface for communication between userland and kernel.
+
+Originally, libnv was inspired by OpenZFS' nvlist implementation. However,
+the implementations are separate. This advisory relates only to the base
+system implementation of libnv, not to the one in OpenZFS.
+
+II. Problem Description
+
+When exchanging data over a socket, libnv uses select(2) to wait for data to
+arrive. However, it does not verify whether the provided socket descriptor
+fits in select(2)'s file descriptor set size limit of FD_SETSIZE (1024).
+
+III. Impact
+
+An attacker who is able to force a libnv application to allocate large file
+descriptors, e.g., by opening many descriptors and executing a program which
+is not careful to close them upon startup, can trigger stack corruption. If
+the target application is setuid-root, then this could be used to elevate
+local privileges.
+
+IV. Workaround
+
+No workaround is available.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date
+and reboot.
+
+Perform one of the following:
+
+1) To update your vulnerable system via a binary patch:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, can be updated via the freebsd-update(8)
+utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-26:16/libnv.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:16/libnv.patch.asc
+# gpg --verify libnv.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in .
+
+d) Recompile your kernel as described in
+ and reboot the
+system.
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 025789eaa648 stable/15-n283380
+releng/15.0/ 7e4d5363ddce releng/15.0-n281032
+stable/14/ 45809b0e1bc1 stable/14-n274081
+releng/14.4/ a5cb4863d65a releng/14.4-n273696
+releng/14.3/ a872c32f389e releng/14.3-n271496
+stable/13/ 4acc2b5c61a7 stable/13-n259862
+releng/13.5/ 32d12677ff45 releng/13.5-n259218
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+
+iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmnySTUbFIAAAAAABAAO
+bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvEdwQAKF0kwMDT0ZjvcDnvqXa
+NmJEse7XRdFDWDcMp8NtSQK5DTYBRpUgwWiC7M+HRr4QIf/aIjzwuJdu1luK913i
+vAJJUbAaEAdGbNqd35FtDlnTWQE638R4HQ0TqMBrUfGTSp0O5SPOpTSPXB1Fw/F7
+Q3c22lNDHgxgZ8+DOoJH70HgjdVskz3ezZroYUKfmk5vh9yZtVM9zMr6iGr6TUA7
+OEbIrMlRCJ3pI9dOSGNKz1i/3s8bMS3U3nvAWIYPdSjKQBOyRdHoZHtk4SfY9TVs
+epqQQccUv9g5+E1QgxxoQHLR4dLkCHEJKOU2sqc/qW9KISX2rsTd2UYgYubxtb+j
+CIzTg23/rkMMhCi3VZ9NVLmGrxZclxyvAVJ/V3942jjag0c1onc+5RH0IGAljgay
+hobn3CBqE2NIOjoFyCJK9RcZ+wtvxFoQFdX6A56h5vDD2I/H7MIFJ0EnW3aWvT8f
+0xiWhD4//9AU3+06soPt6l4tE/YaXJbcvYb92kC1JbbGVApMrDYbdxu3QK8HwAlV
+mNTFd3hgoEzlCiFH9vDNK/RIsVE67kb4KjqZKC1ElWrQbawQZtnKUigpxGcZbhCC
+9zwXgoFRHCzeBiO77anQMgArNuY3Wj29beepzCvOA7u/KRyDTvDat8YRWNKbWS5L
+T3cMyFqgRkUgr7tajk0L51Xx
+=Edvm
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/advisories/FreeBSD-SA-26:17.libnv.asc b/website/static/security/advisories/FreeBSD-SA-26:17.libnv.asc
new file mode 100644
index 0000000000..7c9a1f5833
--- /dev/null
+++ b/website/static/security/advisories/FreeBSD-SA-26:17.libnv.asc
@@ -0,0 +1,156 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-26:17.libnv Security Advisory
+ The FreeBSD Project
+
+Topic: Heap overflow in libnv
+
+Category: core
+Module: libnv
+Announced: 2026-04-29
+Credits: Mariusz Zaborski
+Affects: All supported versions of FreeBSD.
+Corrected: 2026-04-29 14:47:52 UTC (stable/15, 15.0-STABLE)
+ 2026-04-29 14:48:33 UTC (releng/15.0, 15.0-RELEASE-p7)
+ 2026-04-29 14:48:57 UTC (stable/14, 14.4-STABLE)
+ 2026-04-29 14:49:48 UTC (releng/14.4, 14.4-RELEASE-p3)
+ 2026-04-29 14:49:28 UTC (releng/14.3, 14.3-RELEASE-p12)
+ 2026-04-29 14:50:10 UTC (stable/13, 13.5-STABLE)
+ 2026-04-29 14:50:22 UTC (releng/13.5, 13.5-RELEASE-p13)
+CVE Name: CVE-2026-35547
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+libnv is a general-purpose library designed for storing and exchanging sets
+of name-value pairs. This library can serve as an Inter-Process
+Communication (IPC) framework, enabling processes to exchange data and file
+descriptors. For example, it is used in libcasper to establish communication
+between privileged and unprivileged processes. Additionally, libnv can
+function as an interface for communication between userland and kernel.
+
+Originally, libnv was inspired by OpenZFS' nvlist implementation. However,
+the implementations are separate. This advisory relates only to the base
+system implementation of libnv, not the one in OpenZFS.
+
+II. Problem Description
+
+When processing the header of an incoming message, libnv failed to properly
+validate the message size.
+
+III. Impact
+
+The lack of validation allows a malicious program to write outside the bounds
+of a heap allocation. This can trigger a crash or system panic, and it may
+be possible for an unprivileged user to exploit the bug to elevate their
+privileges.
+
+IV. Workaround
+
+No workaround is available.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date.
+
+Perform one of the following:
+
+1) To update your vulnerable system installed from base system packages:
+
+Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
+platforms, which were installed using base system packages, can be updated
+via the pkg(8) utility:
+
+# pkg upgrade -r FreeBSD-base
+# shutdown -r +10min "Rebooting for a security update"
+
+2) To update your vulnerable system installed from binary distribution sets:
+
+Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms,
+or the i386 platform on FreeBSD 13, which were not installed using base
+system packages, can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+# shutdown -r +10min "Rebooting for a security update"
+
+3) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-26:17/libnv.patch
+# fetch https://security.FreeBSD.org/patches/SA-26:17/libnv.patch.asc
+# gpg --verify libnv.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile your kernel as described in
+ and reboot the
+system.
+
+VI. Correction details
+
+This issue is corrected as of the corresponding Git commit hash in the
+following stable and release branches:
+
+Branch/path Hash Revision
+- -------------------------------------------------------------------------
+stable/15/ 414e25d7d512 stable/15-n283381
+releng/15.0/ b345e07c8d71 releng/15.0-n281033
+stable/14/ 1cbd6e148249 stable/14-n274082
+releng/14.4/ 4f0992ce23b0 releng/14.4-n273697
+releng/14.3/ aa15809f85de releng/14.3-n271497
+stable/13/ 05b91c2a7106 stable/13-n259863
+releng/13.5/ f7f48005fbe2 releng/13.5-n259219
+- -------------------------------------------------------------------------
+
+Run the following command to see which files were modified by a
+particular commit:
+
+# git show --stat
+
+Or visit the following URL, replacing NNNNNN with the hash:
+
+
+
+To determine the commit count in a working tree (for comparison against
+nNNNNNN in the table above), run:
+
+# git rev-list --count --first-parent HEAD
+
+VII. References
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=K9xn
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/patches/EN-26:08/pf.patch b/website/static/security/patches/EN-26:08/pf.patch
new file mode 100644
index 0000000000..badbc533dd
--- /dev/null
+++ b/website/static/security/patches/EN-26:08/pf.patch
@@ -0,0 +1,69 @@
+--- sys/netpfil/pf/pf_ioctl.c.orig
++++ sys/netpfil/pf/pf_ioctl.c
+@@ -1345,9 +1345,7 @@
+ PF_MD5_UPD(pfr, addr.iflags);
+ break;
+ case PF_ADDR_TABLE:
+- if (strncmp(pfr->addr.v.tblname, PF_OPTIMIZER_TABLE_PFX,
+- strlen(PF_OPTIMIZER_TABLE_PFX)))
+- PF_MD5_UPD(pfr, addr.v.tblname);
++ PF_MD5_UPD(pfr, addr.v.tblname);
+ break;
+ case PF_ADDR_ADDRMASK:
+ case PF_ADDR_RANGE:
+--- tests/sys/netpfil/pf/pass_block.sh.orig
++++ tests/sys/netpfil/pf/pass_block.sh
+@@ -488,6 +488,47 @@
+ pft_cleanup
+ }
+
++atf_test_case "auto_tables" "cleanup"
++auto_tables_head()
++{
++ atf_set descr 'Test rulesets with different automatic tables'
++ atf_set require.user root
++}
++
++auto_tables_body()
++{
++ pft_init
++
++ epair=$(vnet_mkepair)
++ ifconfig ${epair}b 192.0.2.2/24 up
++
++ vnet_mkjail alcatraz ${epair}a
++ jexec alcatraz ifconfig ${epair}a 192.0.2.1/24 up
++
++ # Sanity check
++ atf_check -s exit:0 -o ignore ping -c 1 -t 1 192.0.2.1
++
++ jexec alcatraz pfctl -e
++ pft_set_rules alcatraz \
++ "set ruleset-optimization basic" \
++ "test_a = \"203.0.113.1 203.0.113.2 203.0.113.3 203.0.113.4
++ 203.0.113.5 203.0.113.6 203.0.113.7 203.0.113.8 203.0.113.9
++ 203.0.113.10\"" \
++ "test_b = \"192.0.2.1 192.0.2.2 192.0.2.3 192.0.2.4 192.0.2.5
++ 192.0.2.6 192.0.2.7 192.0.2.8 192.0.2.9 192.0.2.10\"" \
++ "block" \
++ "pass inet from any to { \$test_a }" \
++ "pass inet from 198.51.100.1 to 198.51.100.2 no state" \
++ "pass inet from any to { \$test_b }"
++
++ atf_check -s exit:0 -o ignore ping -c 1 -t 1 192.0.2.1
++}
++
++auto_tables_cleanup()
++{
++ pft_cleanup
++}
++
+ atf_init_test_cases()
+ {
+ atf_add_test_case "enable_disable"
+@@ -500,4 +541,5 @@
+ atf_add_test_case "optimize_any"
+ atf_add_test_case "any_if"
+ atf_add_test_case "addr_range"
++ atf_add_test_case "auto_tables"
+ }
diff --git a/website/static/security/patches/EN-26:08/pf.patch.asc b/website/static/security/patches/EN-26:08/pf.patch.asc
new file mode 100644
index 0000000000..725a0c47d2
--- /dev/null
+++ b/website/static/security/patches/EN-26:08/pf.patch.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=lWlJ
+-----END PGP SIGNATURE-----
diff --git a/website/static/security/patches/EN-26:09/tzdata-2026b-144.patch b/website/static/security/patches/EN-26:09/tzdata-2026b-144.patch
new file mode 100644
index 0000000000..6e6b8e25fc
--- /dev/null
+++ b/website/static/security/patches/EN-26:09/tzdata-2026b-144.patch
@@ -0,0 +1,681 @@
+--- contrib/tzdata/Makefile.orig
++++ contrib/tzdata/Makefile
+@@ -66,28 +66,6 @@
+
+ LOCALTIME= Factory
+
+-# The POSIXRULES macro controls interpretation of POSIX-like TZ
+-# settings like TZ='EET-2EEST' that lack DST transition rules.
+-# If POSIXRULES is '-', no template is installed; this is the default.
+-# Any other value for POSIXRULES is obsolete and should not be relied on, as:
+-# * It does not work correctly in popular implementations such as GNU/Linux.
+-# * It does not work even in tzcode, except for historical timestamps
+-# that precede the last explicit transition in the POSIXRULES file.
+-# Hence it typically does not work for current and future timestamps.
+-# If, despite the above, you want a template for handling these settings,
+-# you can change the line below (after finding the timezone you want in the
+-# one of the $(TDATA) source files, or adding it to a source file).
+-# Alternatively, if you discover you've got the wrong timezone, you can just
+-# 'zic -p -' to remove it, or 'zic -p rightzone' to change it.
+-# Use the command
+-# make zonenames
+-# to get a list of the values you can use for POSIXRULES.
+-
+-POSIXRULES= -
+-
+-# Also see TZDEFRULESTRING below, which takes effect only
+-# if POSIXRULES is '-' or if the template file cannot be accessed.
+-
+
+ # Installation locations.
+ #
+@@ -170,7 +148,7 @@
+ # applications that are not leap second aware, and is closer to unsmeared
+ # "right" time than unsmeared POSIX time is (e.g., 0.5 vs 1.0 s max error).
+
+-REDO= posix_right
++REDO= posix_only
+
+ # Whether to put an "Expires" line in the leapseconds file.
+ # Use EXPIRES_LINE=1 to put the line in, 0 to omit it.
+@@ -284,7 +262,10 @@
+ # -DHAVE_STRDUP=0 if your system lacks the strdup function
+ # -DHAVE_STRNLEN=0 if your system lacks the strnlen function+
+ # -DHAVE_STRTOLL=0 if your system lacks the strtoll function+
+-# -DHAVE_STRUCT_STAT_ST_CTIM=0 if struct stat lacks a member st_ctim+
++# -DHAVE_STRUCT_STAT_ST_CTIM=0 if struct stat lacks a status-change member
++# of type struct timespec, so code should use st_ctime instead;
++# but if the status-change member name is st_ctimespec,
++# use -Dst_ctim=st_ctimespec instead (default is guessed)+
+ # -DHAVE_STRUCT_TIMESPEC=0 if your system lacks struct timespec+
+ # -DHAVE_SYMLINK=0 if your system lacks the symlink function
+ # -DHAVE_SYS_STAT_H=0 if does not work*
+@@ -322,13 +303,13 @@
+ # variable, 0 otherwise (default is guessed)
+ # -DHAVE_SYS_SINGLE_THREADED_H=0 if works,
+ # 0 otherwise (default is guessed)
+-# -DTHREAD_RWLOCK to use read-write locks intead of mutexes.
+-# This can improve paralellism and thus save real time
++# -DTHREAD_RWLOCK to use read-write locks instead of mutexes.
++# This can improve parallelism and thus save real time
+ # if many threads call tzcode functions simultaneously.
+ # It also costs CPU time and thus energy.
+ # -DTHREAD_TM_MULTI to have gmtime, localtime, and offtime
+ # return different struct tm * addresses in different threads.
+-# This supports unportable programs that call
++# This supports nonportable programs that call
+ # gmtime/localtime/offtime when they should call
+ # gmtime_r/localtime_r/offtime_r to avoid races.
+ # Because the corresponding storage is freed on thread exit,
+@@ -347,10 +328,13 @@
+ # -DTZ_DOMAIN=\"foo\" to use "foo" for gettext domain name; default is "tz"
+ # -DTZ_DOMAINDIR=\"/path\" to use "/path" for gettext directory;
+ # the default is system-supplied, typically "/usr/lib/locale"
++# -DTZ_RUNTIME_LEAPS=0 to disable runtime support for leap seconds.
++# This conforms to POSIX, shrinks tzcode's attack surface,
++# and is more efficient. However, it fails to support Internet
++# RFC 9636's leap seconds.
+ # -DTZDEFRULESTRING=\",date/time,date/time\" to default to the specified
+-# DST transitions for proleptic format TZ strings lacking them,
+-# in the usual case where POSIXRULES is '-'. If not specified,
+-# TZDEFRULESTRING defaults to US rules for future DST transitions.
++# DST transitions for proleptic format TZ strings lacking them.
++# If not specified, it defaults to US rules for future DST transitions.
+ # This mishandles some past timestamps, as US DST rules have changed.
+ # It also mishandles settings like TZ='EET-2EEST' for eastern Europe,
+ # as Europe and US DST rules differ.
+@@ -400,12 +384,13 @@
+ -Wold-style-definition -Woverlength-strings -Wpointer-arith \
+ -Wshadow -Wshift-overflow=2 -Wstrict-overflow \
+ -Wstrict-prototypes -Wstringop-overflow=4 \
+- -Wstringop-truncation -Wsuggest-attribute=cold \
++ -Wsuggest-attribute=cold \
+ -Wsuggest-attribute=const -Wsuggest-attribute=format \
+ -Wsuggest-attribute=malloc \
+ -Wsuggest-attribute=noreturn -Wsuggest-attribute=pure \
+ -Wtrampolines -Wundef -Wunused-macros -Wuse-after-free=3 \
+ -Wvariadic-macros -Wvla -Wwrite-strings \
++ -Wzero-as-null-pointer-constant \
+ -Wno-format-nonliteral -Wno-sign-compare -Wno-type-limits
+ #
+ # If your system has a "GMT offset" field in its "struct tm"s
+@@ -723,7 +708,6 @@
+ '$(DESTDIR)$(MANDIR)/man3' '$(DESTDIR)$(MANDIR)/man5' \
+ '$(DESTDIR)$(MANDIR)/man8'
+ $(ZIC_INSTALL) -l $(LOCALTIME) \
+- -p $(POSIXRULES) \
+ -t '$(DESTDIR)$(TZDEFAULT)'
+ cp -f $(TABDATA) '$(DESTDIR)$(TZDIR)/.'
+ cp tzselect '$(DESTDIR)$(BINDIR)/.'
+--- contrib/tzdata/NEWS.orig
++++ contrib/tzdata/NEWS
+@@ -1,5 +1,137 @@
+ News for the tz database
+
++Release 2026a - 2026-04-22 23:06:43 -0700
++
++ Briefly:
++ British Columbia moved to permanent -07 on 2026-03-09.
++ Some more overflow bugs have been fixed in zic.
++
++ Changes to future timestamps
++
++ British Columbia’s 2026-03-08 spring forward was its last
++ foreseeable clock change, as it moved to permanent -07 thereafter.
++ (Thanks to Arthur David Olson.) Although the change to permanent
++ -07 legally took place on 2026-03-09, temporarily model the change
++ to occur on 2026-11-01 at 02:00 instead. This works around a
++ limitation in CLDR v48.2 (2026-03-17). This temporary hack is
++ planned to be removed after CLDR is fixed.
++
++ Changes to code
++
++ zic no longer mishandles a last transition to a new time type.
++
++ zic no longer overflows a buffer when generating a TZ string like
++ "PST-167:59:58PDT-167:59:59,M11.5.6/-167:59:59,M12.5.6/-167:59:59",
++ which can occur with adversarial input. (Thanks to Naveed Khan.)
++
++ zic no longer generates a longer TZif file than necessary when
++ an earlier time zone abbreviation is a suffix of a later one.
++ As a nice side effect, zic no longer overflows a buffer when given
++ a long series of abbreviations, each a suffix of the next.
++ (Buffer overflow reported by Arthur Chan.)
++
++ zic no longer overflows an int when processing input like ‘Zone
++ Ouch 2147483648:00:00 - LMT’. The int overflow can lead to buffer
++ overflow in adversarial cases. (Thanks to Naveed Khan.)
++
++ zic now checks for signals more often.
++
++
++Release 2026a - 2026-03-01 22:59:49 -0800
++
++ Briefly:
++ Moldova has used EU transition times since 2022.
++ The “right” TZif files are no longer installed by default.
++ -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
++ TZif files are no longer limited to 50 bytes of abbreviations.
++ zic is no longer limited to 50 leap seconds.
++ Several integer overflow bugs have been fixed.
++
++ Changes to past and future timestamps
++
++ Since 2022 Moldova has observed EU transition times, that is, it
++ has sprung forward at 03:00, not 02:00, and has fallen back at
++ 04:00, not 03:00. (Thanks to Heitor David Pinto.)
++
++ Changes to data
++
++ Remove Europe/Chisinau from zonenow.tab, as it now agrees with
++ Europe/Athens for future timestamps.
++
++ Changes to build procedure
++
++ The Makefile no longer by default installs an alternate set
++ of TZif files for system clocks that count leap seconds.
++ Install with ‘make REDO=posix_right’ to get the old default,
++ which is rarely used in major downstream distributions.
++ If your system clock counts leap seconds (contrary to POSIX),
++ it is better to install with ‘make REDO=right_only’.
++ This change does not affect the leapseconds file, which is still
++ installed as before.
++
++ The Makefile’s POSIXRULES option, which was declared obsolete in
++ release 2019b, has been removed. The Makefile’s build procedure
++ thus no longer optionally installs the obsolete posixrules file.
++
++ Changes to code
++
++ Compiling with the new option -DTZ_RUNTIME_LEAPS=0 disables
++ runtime support for leap seconds. Although this conforms to
++ POSIX, shrinks tzcode’s attack surface, and is more efficient,
++ it fails to support Internet RFC 9636’s leap seconds.
++
++ zic now can generate, and localtime.c can now use, TZif files that
++ hold up to 256 bytes of abbreviations, counting trailing NULs.
++ The previous limit was 50 bytes, and some tzdata TZif files were
++ already consuming 40 bytes. zic -v warns if it generates a file
++ that exceeds the old 50-byte limit.
++
++ zic -L can now generate TZif files with more than 50 leap seconds.
++ This helps test TZif readers not limited to 50 leap seconds, as
++ tzcode’s localtime.c is; it has little immediate need for
++ practical timekeeping as there have been only 27 leap seconds and
++ possibly there will be no more, due to planned changes to UTC.
++ zic -v warns if its output exceeds the old 50-second limit.
++
++ localtime.c no longer accesses the posixrules file generated by
++ zic -p. Hence for obsolete and nonconforming settings like
++ TZ="AST4ADT" it now typically falls back on US DST rules, rather
++ than attempting to override this fallback with the contents of the
++ posixrules file. This removes library support that was declared
++ obsolete in release 2019b, and fixes some undefined behavior.
++ (Undefined behavior reported by GitHub user Naveed8951.)
++
++ The posix2time, posix2time_z, time2posix, and time2posix_z
++ functions now set errno=EOVERFLOW and return ((time_t) -1) if the
++ result is not representable. Formerly they had undefined behavior
++ that could in practice result in crashing, looping indefinitely,
++ or returning an incorrect result. As before, these functions are
++ defined only when localtime.c is compiled with the -DSTD_INSPIRED
++ option.
++
++ Some other undefined behavior, triggered by TZif files containing
++ outlandish but conforming UT offsets or leap second corrections,
++ has also been fixed. (Some of these bugs reported by Naveed8951.)
++
++ localtime.c no longer rejects TZif files that exactly fit in its
++ internal structures, fixing off-by-one typos introduced in 2014g.
++
++ zic no longer generates a no-op transition when
++ simultaneous Rule and Zone changes cancel each other out.
++ This occurs in tzdata only in Asia/Tbilisi on 1997-03-30.
++ (Thanks to Renchunhui for a test case showing the bug.)
++
++ zic no longer assumes you can fflush a read-only stream.
++ (Problem reported by Christos Zoulas.)
++
++ zic no longer generates UT offsets equal to -2**31 and localtime.c
++ no longer accepts them, as they can cause trouble in both
++ localtime.c and its callers. RFC 9636 prohibits such offsets.
++
++ zic -p now warns that the -p option is obsolete and likely
++ ineffective.
++
++
+ Release 2025c - 2025-12-10 14:42:37 -0800
+
+ Briefly:
+@@ -69,6 +201,8 @@
+ The new CFLAGS options -DHAVE_STRUCT_STAT_ST_CTIM=0 and
+ -DHAVE_STRUCT_TIMESPEC=0 port to non-POSIX.1-2008 platforms
+ that lack st_ctim and struct timespec, respectively.
++ On these platforms, the code falls back on st_ctime to
++ implement -DTZ_CHANGE_INTERVAL=N.
+
+ tzset etc. now treat ' ' like '_' in time zone abbreviations,
+ just as they treat other invalid bytes. This continues the
+@@ -89,7 +223,7 @@
+
+ The new CFLAGS option -TTHREAD_TM_MULTI causes localtime to return
+ a pointer to thread-specific memory, as FreeBSD does, instead of
+- to the same memory in all threads. This supports unportable
++ to the same memory in all threads. This supports nonportable
+ programs that incorrectly use localtime instead of localtime_r.
+ This option affects gmtime and offtime similarly to localtime.
+ Because the corresponding storage is freed on thread exit, this
+--- contrib/tzdata/backzone.orig
++++ contrib/tzdata/backzone
+@@ -1757,13 +1757,12 @@
+ # Midway
+ #
+ # From Mark Brader (2005-01-23):
+-# [Fallacies and Fantasies of Air Transport History, by R.E.G. Davies,
+-# published 1994 by Paladwr Press, McLean, VA, USA; ISBN 0-9626483-5-3]
++# []
+ # reproduced a Pan American Airways timetable from 1936, for their weekly
+ # "Orient Express" flights between San Francisco and Manila, and connecting
+ # flights to Chicago and the US East Coast. As it uses some time zone
+ # designations that I've never seen before:....
+-# Fri. 6:30A Lv. HONOLOLU (Pearl Harbor), H.I. H.L.T. Ar. 5:30P Sun.
++# Fri. 6:30A Lv. HONOLULU (Pearl Harbor), H.I. . H.L.T. Ar. 5:30P Sun.
+ # " 3:00P Ar. MIDWAY ISLAND . . . . . . . . . M.L.T. Lv. 6:00A "
+ #
+ Zone Pacific/Midway -11:49:28 - LMT 1901
+--- contrib/tzdata/etcetera.orig
++++ contrib/tzdata/etcetera
+@@ -20,7 +20,8 @@
+ # which load the "UTC" file to handle seconds properly.
+ Zone Etc/UTC 0 - UTC
+
+-# Functions like gmtime load the "GMT" file to handle leap seconds properly.
++# If leap second support is enabled, functions like gmtime
++# load the "GMT" file to handle leap seconds properly.
+ # Vanguard section, which works with most .zi parsers.
+ #Zone GMT 0 - GMT
+ # Rearguard section, for TZUpdater 2.3.2 and earlier.
+--- contrib/tzdata/europe.orig
++++ contrib/tzdata/europe
+@@ -1041,9 +1041,19 @@
+
+ # Greenland
+ #
+-# From Paul Eggert (2004-10-31):
++# From Paul Eggert (2026-01-22):
++# During World War II, Greenland was effectively independent of Denmark and
++# observed daylight saving time. TIME, volume 37, page 23 (1941-04-21)
++# says,
++# "Penfield and West made their way to the U.S.'s most northerly consulate.
++# They were astonished to find that Greenlanders, with almost 24 hours of
++# sunlight a day during the summer, have daylight saving time."
++# As the details are unknown they are omitted from the data for now.
++#
+ # During World War II, Germany maintained secret manned weather stations in
+ # East Greenland and Franz Josef Land, but we don't know their time zones.
++# Also, they're likely out of scope for the database
++# as we lack resources to track every bit of military activity.
+ # My source for this is Wilhelm Dege's book mentioned under Svalbard.
+ #
+ # From Paul Eggert (2017-12-10):
+@@ -1957,7 +1967,6 @@
+
+ # From Stepan Golosunov (2016-03-07):
+ # the act of the government of the Republic of Moldova Nr. 132 from 1990-05-04
+-# http://lex.justice.md/viewdoc.php?action=view&view=doc&id=298782&lang=2
+ # ... says that since 1990-05-06 on the territory of the Moldavian SSR
+ # time would be calculated as the standard time of the second time belt
+ # plus one hour of the "summer" time. To implement that clocks would be
+@@ -2012,9 +2021,61 @@
+ # says the 2014-03-30 spring-forward transition was at 02:00 local time.
+ # Guess that since 1997 Moldova has switched one hour before the EU.
+
++# From Heitor David Pinto (2026-02-22):
++# Soviet Moldovan resolution 132 of 1990 defined the summer time period from
++# the last Sunday in March at 2:00 to the last Sunday in September at 3:00,
++# matching the dates used in most of Europe at the time:
++# https://web.archive.org/web/20211107050832/http://lex.justice.md/viewdoc.php?action=view&view=doc&id=298782&lang=1
++#
++# It seems that in 1996 Moldova changed the end date to October like most of
++# Europe, but kept the transitions at 2:00 and 3:00 rather than 1:00 UTC,
++# which would have been locally 3:00 and 4:00....
++#
++# The notices in the Moldovan government website and broadcaster showed the
++# transitions at 2:00 and 3:00 until 2021:
++# 2015 https://old.gov.md/en/node/7304
++# 2016 https://old.gov.md/en/node/12587
++# 2017 https://old.gov.md/en/node/20654
++# 2017 https://old.gov.md/en/content/moldova-upholds-winter-time-night-28-29-october
++# 2018 https://old.gov.md/en/content/moldova-switch-summer-time
++# 2018 https://old.gov.md/en/content/cabinet-ministers-informs-about-switch-winter-time-28-october
++# 2019 https://old.gov.md/en/content/moldova-switch-summer-time-31-march
++# 2019 https://old.gov.md/en/node/31122
++# 2020 https://old.gov.md/en/node/32771
++# 2020 https://old.gov.md/en/node/34497
++# 2021 https://trm.md/ro/social/moldova-trece-in-aceasta-noapte-la-ora-de-vara
++# 2021 https://trm.md/en/social/republica-moldova-trece-la-ora-de-iarna1
++#
++# However, since 2022, the notices showed the transitions at 3:00 and 4:00,
++# matching the EU rule at 1:00 UTC:
++# 2022 https://trm.md/en/social/in-acest-weekend-republica-moldova-trece-la-ora-de-vara
++# 2022 https://old.gov.md/en/content/moldova-switch-winter-time
++# 2023 https://moldova1.md/p/6587/ora-de-vara-2023-cum-schimbam-acele-ceasornicelor-si-cand-trecem-la-ora-de-vara
++# 2023 https://old.gov.md/en/node/46662
++# 2024 https://moldova1.md/p/26535/republica-moldova-trece-la-ora-de-vara-in-acest-weekend
++# 2024 https://moldova1.md/p/37768/republica-moldova-trece-in-aceasta-noapte-la-ora-de-iarna
++# 2025 https://moldova1.md/p/46349/republica-moldova-trece-la-ora-de-vara-pe-30-martie-cum-ne-afecteaza-si-ce-recomanda-medicii
++# 2025 https://moldova1.md/p/60469/republica-moldova-trece-la-ora-de-iarna-ceasurile-se-dau-inapoi-cu-o-ora
++#
++# It seems that the changes to the end date and transition times were just
++# done in practice without formally changing the resolution. In late 2025, the
++# government said that the Soviet resolution was still in force, and proposed
++# a new resolution to replace it and formally establish the EU rule:
++# ... based on the notices, it seems that in practice Moldova already
++# uses the EU rule since 2022. This was also the year when Moldova applied to
++# join the EU.
++#
++# From Robert Bastian (2026-02-26):
++# This has been approved and published in the government gazette:
++# https://monitorul.gov.md/ro/monitorul/view/pdf/3234/part/2#page=27
++#
++# From Paul Eggert (2026-02-24):
++# Also see Svetlana Rudenko, "Moldova abandons the 'Soviet era'", Logos Press,
++# 2026-02-21 .
++
+ # Rule NAME FROM TO - IN ON AT SAVE LETTER/S
+-Rule Moldova 1997 max - Mar lastSun 2:00 1:00 S
+-Rule Moldova 1997 max - Oct lastSun 3:00 0 -
++Rule Moldova 1997 2021 - Mar lastSun 2:00 1:00 S
++Rule Moldova 1997 2021 - Oct lastSun 3:00 0 -
+
+ # Zone NAME STDOFF RULES FORMAT [UNTIL]
+ Zone Europe/Chisinau 1:55:20 - LMT 1880
+@@ -2027,7 +2088,8 @@
+ 2:00 Russia EE%sT 1992
+ 2:00 E-Eur EE%sT 1997
+ # See Romania commentary for the guessed 1997 transition to EU rules.
+- 2:00 Moldova EE%sT
++ 2:00 Moldova EE%sT 2022
++ 2:00 EU EE%sT
+
+ # Poland
+
+@@ -2413,7 +2475,7 @@
+ # Nine O'clock
+ # (1998-10-23) reports that the switch occurred at
+ # 04:00 local time in fall 1998. For lack of better info,
+-# assume that Romania and Moldova switched to EU rules in 1997,
++# assume that Romania switched to EU rules in 1997,
+ # the same year as Bulgaria.
+ #
+ # Rule NAME FROM TO - IN ON AT SAVE LETTER/S
+--- contrib/tzdata/leap-seconds.list.orig
++++ contrib/tzdata/leap-seconds.list
+@@ -60,15 +60,15 @@
+ #
+ # The following line shows the last update of this file in NTP timestamp:
+ #
+-#$ 3960835200
++#$ 3976686858
+ #
+ # 2) Expiration date of the file given on a semi-annual basis: last June or last December
+ #
+-# File expires on 28 June 2026
++# File expires on 28 December 2026
+ #
+ # Expire date in NTP timestamp:
+ #
+-#@ 3991593600
++#@ 4007404800
+ #
+ #
+ # LIST OF LEAP SECONDS
+@@ -117,4 +117,4 @@
+ # please see the readme file in the 'source' directory :
+ # https://hpiers.obspm.fr/iers/bul/bulc/ntp/sources/README
+ #
+-#h 49db2447 571e5e1b 2f002a53 9c8da8e4 39b8e49e
++#h 2e101270 4e6749f8 2f1792b7 14a0c188 36bb19d6
+--- contrib/tzdata/leapseconds.orig
++++ contrib/tzdata/leapseconds
+@@ -70,7 +70,7 @@
+ # Any additional leap seconds will come after this.
+ # This Expires line is commented out for now,
+ # so that pre-2020a zic implementations do not reject this file.
+-#Expires 2026 Jun 28 00:00:00
++#Expires 2026 Dec 28 00:00:00
+
+ # Here are POSIX timestamps for the data in this file.
+ # "#updated" gives the last time the leap seconds data changed
+@@ -79,8 +79,8 @@
+ # "#expires" gives the first time this file might be wrong;
+ # if this file was derived from the IERS leap-seconds.list,
+ # this is typically a bit less than one year after "updated".
+-#updated 1751846400 (2025-07-07 00:00:00 UTC)
+-#expires 1782604800 (2026-06-28 00:00:00 UTC)
++#updated 1767698058 (2026-01-06 11:14:18 UTC)
++#expires 1798416000 (2026-12-28 00:00:00 UTC)
+
+ # Updated through IERS Bulletin C (https://hpiers.obspm.fr/iers/bul/bulc/bulletinc.dat)
+-# File expires on 28 June 2026
++# File expires on 28 December 2026
+--- contrib/tzdata/northamerica.orig
++++ contrib/tzdata/northamerica
+@@ -1957,6 +1957,56 @@
+ # https://searcharchives.vancouver.ca/daylight-saving-1918-starts-again-july-7-1941-start-d-s-sept-27-end-of-d-s-1941
+ # We have no further details, so omit them for now.
+
++# From Arthur David Olson (2026-03-02):
++# B. C. Gov News: “Adopting permanent daylight saving time: ‘Spring forward’
++# on March 8 will be the last time change, ending twice-yearly clock changes.”
++# https://news.gov.bc.ca/releases/2026AG0013-000209
++#
++# From Paul Eggert (2026-03-07):
++# The law says that 21 hours after the usual 2026-03-08 02:00 switch from
++# PST to PDT, the next day inaugurates the new standard time Pacific Time,
++# i.e., just one clock change but two name changes separated by 21 hours.
++# PT, the obvious abbreviation for Pacific Time, is one letter too short
++# to conform to TZDB’s (and POSIX’s) [-+[:alnum:]]{3,6} requirements.
++# I asked the BC government for advice, with no response. For now, do this:
++# 1. As a temporary hack, pretend that the BC law takes effect
++# not on 2026-03-09 at 00:00, but on 2026-11-01 at 02:00.
++# This pretense works around a limitation in CLDR v48.2 (2026-03-17),
++# which would otherwise say the interval uses “Pacific Standard Time”.
++# (Below, this temporary hack is marked “Temporary hack; see above.”)
++# Strictly speaking this hack is incorrect since the interval uses
++# standard time, but it does have the right UT offset and it
++# works around the CLDR limitation. We should be able to remove
++# the temporary hack after CLDR is fixed.
++# 2. After the BC law takes effect, model the time as MST sans DST.
++# We can change this later if another conforming non-numeric abbreviation
++# for Pacific Time becomes more popular. Possibilities include:
++# MST - the most compatible with existing software and practice,
++# and already used in parts of BC and in Yukon
++# PDT - almost as software-friendly, but confusing because it implies
++# it is DST and is paired with PST, whereas PT is standard time
++# PST - straightforward but even more confusing,
++# and will likely break much software that assumes PST is -08
++# -07 - accurate and clear in itself, but makes BC look odd vs neighbors
++# CPT, CPST - for Canadian Pacific (Standard) Time,
++# by analogy with AEST in Australia
++# P-T - conforming approximation to “PT”
++# PT+ - like P-T but suggesting one-hour advance over PST
++
++# From Chris Walton (2026-03-15):
++# The Regional District of East Kootenay is planning to move to year-round
++# Mountain Standard Time (MST) on November 1, 2026....
++# https://www.rdek.bc.ca/news/entry/rdek_board_moves_to_transition_to_year_round_mountain_standard_time
++# (2026-03-17):
++# The final decision East Kootenay made a few days ago may turn out not to
++# be final after all. They are going to reopen the debate next month!
++# https://www.cbc.ca/news/canada/british-columbia/what-time-is-it-in-the-east-kootenay-debate-9.7132624
++# From Paul Eggert (2026-03-17):
++# Mayor Steve Fairbairn of Elkford asked the question be called a second time,
++# saying, “Pardon the pun, but this is not a time-sensitive issue.”
++# For now, merely mention the potential change in these comments.
++# If it happens it would likely affect clocks starting 2027-03-14 at 02:00.
++
+ # Rule NAME FROM TO - IN ON AT SAVE LETTER/S
+ Rule Vanc 1918 only - Apr 14 2:00 1:00 D
+ Rule Vanc 1918 only - Oct 27 2:00 0 S
+@@ -1970,7 +2020,11 @@
+ # Zone NAME STDOFF RULES FORMAT [UNTIL]
+ Zone America/Vancouver -8:12:28 - LMT 1884
+ -8:00 Vanc P%sT 1987
+- -8:00 Canada P%sT
++ -8:00 Canada P%sT 2026 Mar 9
++ # Temporary hack; see above.
++ -8:00 1:00 PDT 2026 Nov 1 02:00
++ # End of temporary hack.
++ -7:00 - MST
+ Zone America/Dawson_Creek -8:00:56 - LMT 1884
+ -8:00 Canada P%sT 1947
+ -8:00 Vanc P%sT 1972 Aug 30 2:00
+--- contrib/tzdata/theory.html.orig
++++ contrib/tzdata/theory.html
+@@ -3,14 +3,16 @@
+
+ Theory and pragmatics of the tz code and data
+
++
+
+
+
+
+
Theory and pragmatics of the tz code and data
+-
Outline
+
+
+
+@@ -118,16 +121,16 @@
+ Inexperienced users are not expected to select these names unaided.
+ Distributors should provide documentation and/or a simple selection
+ interface that explains each name via a map or via descriptive text like
+-"Czech Republic" instead of the timezone name "Europe/Prague".
++“Czech Republic” instead of the timezone name “Europe/Prague”.
+ If geolocation information is available, a selection interface can
+ locate the user on a timezone map or prioritize names that are
+ geographically close. For an example selection interface, see the
+ tzselect program in the tz code.
+-Unicode's Common Locale Data
++Unicode’s Common Locale Data
+ Repository (CLDR)
+ contains data that may be useful for other selection
+ interfaces; it maps timezone names like Europe/Prague to
+-locale-dependent strings like "Prague", "Praha", "Прага", and "布拉格".
++locale-dependent strings like “Prague”, “Praha”, “Прага”, and “布拉格”.
+
+
+
+@@ -142,13 +145,13 @@
+ civil time.
+
+
+- Indicate to experts where the timezone's clocks typically are.
++ Indicate to experts where the timezone’s clocks typically are.
+
+
+ Be robust in the presence of political changes.
+ For example, names are typically not tied to countries, to avoid
+ incompatibilities when countries change their name (e.g.,
+- Swaziland→Eswatini) or when locations change countries (e.g., Hong
++ Swaziland→Eswatini) or when locations change countries (e.g., Hong
+ Kong from UK colony to China).
+ There is no requirement that every country or national
+ capital must have a timezone name.
+@@ -166,11 +169,11 @@
+ AREA/LOCATION, where
+ AREA is a continent or ocean, and
+ LOCATION is a specific location within the area.
+-North and South America share the same area, 'America'.
+-Typical names are 'Africa/Cairo',
+-'America/New_York', and 'Pacific/Honolulu'.
++North and South America share the same area, America.
++Typical names are Africa/Cairo,
++America/New_York, and Pacific/Honolulu.
+ Some names are further qualified to help avoid confusion; for example,
+-'America/Indiana/Petersburg' distinguishes Petersburg,
++America/Indiana/Petersburg distinguishes Petersburg,
+ Indiana from other Petersburgs in America.
+
+
+@@ -183,25 +186,25 @@
+
+
+ Use only valid POSIX file name components (i.e., the parts of
+- names other than '/').
+- Do not use the file name components '.' and
+- '..'.
++ names other than "/").
++ Do not use the file name components "." and
++ "..".
+ Within a file name component, use only ASCII letters,
+- '.', '-' and '_'.
++ ".", "-" and "_".
+ Do not use digits, as that might create an ambiguity with POSIX's proleptic
+- TZ strings.
++ href="https://pubs.opengroup.org/onlinepubs/9799919799/basedefs/V1_chap08.html#tag_08_03">POSIX’s
++ proleptic TZ strings.
+ A file name component must not exceed 14 characters or start with
+- '-'.
++ "-".
+ E.g., prefer America/Noronha to
+ America/Fernando_de_Noronha.
+ Exceptions: see the discussion of legacy names below.
+
+
+- A name must not be empty, or contain '//', or
+- start or end with '/'.
+- Also, a name must not be 'Etc/Unknown', as
++ A name must not be empty, or contain "//", or
++ start or end with "/".
++ Also, a name must not be "Etc/Unknown", as
+ CLDR uses that string for an unknown or invalid timezone.
+
+
+@@ -213,7 +216,7 @@
+
+ If one name A is an initial prefix of another
+ name AB (ignoring case), then B must not
+- start with '/', as a regular file cannot have the
++ start with "/", as a regular file cannot have the
+ same name as a directory in POSIX.
+ For example, America/New_York precludes
+ America/New_York/Bronx.
+@@ -280,8 +283,8 @@
+ Atlantic/Canaries.
+
+
+- Omit common suffixes like '_Islands' and
+- '_City', unless that would lead to ambiguity.
++ Omit common suffixes like "_Islands" and
++ "_City", unless that would lead to ambiguity.
+ E.g., prefer America/Cayman to
+ America/Cayman_Islands and
+ America/Guatemala to
+@@ -292,10 +295,10 @@
+ country of Mexico has several time zones.
+
+
+- Use '_' to represent a space.
++ Use "_" to represent a space.
+
+
+- Omit '.' from abbreviations in names.
++ Omit "." from abbreviations in names.
+ E.g., prefer Atlantic/St_Helena to
+ Atlantic/St._Helena.
+
+@@ -303,15 +306,15 @@
+ Do not change established names if they only marginally violate
+ the above guidelines.
+ For example, do not change the existing name Europe/Rome to
+- Europe/Milan merely because Milan's population has grown
+- to be somewhat greater than Rome's.
++ Europe/Milan merely because Milan’s population has grown
++ to be somewhat greater than Rome’s.
+
+
+ If a name is changed, put its old spelling in the
+- 'backward' file as a link to the new spelling.
++ "backward" file as a link to the new spelling.
+ This means old spellings will continue to work.
+ Ordinarily a name change should occur only in the rare case when
+- a location's consensus English-language spelling changes; for example,
++ a location’s consensus English-language spelling changes; for example,
+ in 2008 Asia/Calcutta was renamed to Asia/Kolkata
+ due to long-time widespread use of the new city name instead of the old.
+
+@@ -327,11 +330,11 @@
+
+
+ Older versions of this package used a different naming scheme.
+-See the file 'backward' for most of these older names
+-(e.g., 'US/Eastern' instead of 'America/New_York').
++See the file "backward" for most of these older names
++(e.g., US/Eastern instead of America/New_York).
+ The other old-fashioned names still supported are
+-'WET', 'CET', 'MET', and
+-'EET' (see the file 'europe').
++WET, CET, MET, and
++EET (see the file "europe").
+
+
+
+@@ -339,13 +342,13 @@
+ incompatible with the first guideline of location names, but which are
+ still supported.
+ These legacy names are mostly defined in the file
+-'etcetera'.
+-Also, the file 'backward' defines the legacy names
+-'Etc/GMT0', 'Etc/GMT-0', 'Etc/GMT+0',
+-'GMT0', 'GMT-0' and 'GMT+0',
+-and the file 'northamerica' defines the legacy names
+-'EST5EDT', 'CST6CDT',
+-'MST7MDT', and 'PST8PDT'.
++"etcetera".
++Also, the file "backward" defines the legacy names
++Etc/GMT0, Etc/GMT-0, Etc/GMT+0,
++GMT0, GMT-0 and GMT+0,
++and the file "northamerica" defines the legacy names
++EST5EDT, CST6CDT,
++MST7MDT, and PST8PDT.
+
+
+
+@@ -365,11 +368,11 @@
+ to name timezones.
+ It is intended to be an exhaustive list of names for geographic
+ regions as described above; this is a subset of the timezones in the data.
+-Although a zone1970.tab location's
++Although a zone1970.tab location’s
+ longitude
+ corresponds to
+ its local mean
+-time (LMT) offset with one hour for every 15°
++time (LMT) offset with one hour for every 15°
+ east longitude, this relationship is not exact.
+ The backward-compatibility file zone.tab is similar
+ but conforms to the older-version guidelines related to ISO 3166-1;
+@@ -395,7 +398,7 @@
+ like <+08>-8;
+ no other source file other than backward
+ contains links to its zones.
+-One of etcetera's names is Etc/UTC,
++One of etcetera’s names is Etc/UTC,
+ used by functions like gmtime to obtain leap
+ second information on platforms that support leap seconds.
+ Another etcetera name, GMT,
+@@ -407,7 +410,7 @@
+
Time zone abbreviations
+
+ When this package is installed, it generates time zone abbreviations
+-like 'EST' to be compatible with human tradition and POSIX.
++like EST to be compatible with human tradition and POSIX.
+ Here are the general guidelines used for choosing time zone abbreviations,
+ in decreasing order of importance:
+
+@@ -415,25 +418,24 @@
+
+
+ Use three to six characters that are ASCII alphanumerics or
+- '+' or '-'.
++ "+" or "-".
+ Previous editions of this database also used characters like
+- space and '?', but these characters have a
++ space and "?", but these characters have a
+ special meaning to the
+ UNIX shell
+ and cause commands like
+- 'set
+- `date`'
++ "set
++ `date`"
+ to have unexpected effects.
+ Previous editions of this guideline required upper-case letters, but the
+ Congressman who introduced
+ Chamorro
+- Standard Time preferred "ChST", so lower-case letters are now
+- allowed.
+- Also, POSIX from 2001 on relaxed the rule to allow '-',
+- '+', and alphanumeric characters from the portable
++ Standard Time preferred “ChST”, so lower-case letters are now allowed.
++ Also, POSIX from 2001 on relaxed the rule to allow "-",
++ "+", and alphanumeric characters from the portable
+ character set in the current locale.
+- In practice ASCII alphanumerics and '+' and
+- '-' are safe in all locales.
++ In practice ASCII alphanumerics and "+" and
++ "-" are safe in all locales.
+
+
+ In other words, in the C locale the POSIX extended regular
+@@ -445,10 +447,10 @@
+
+
+ Use abbreviations that are in common use among English-speakers,
+- e.g., 'EST' for Eastern Standard Time in North America.
++ e.g., “EST” for Eastern Standard Time in North America.
+ We assume that applications translate them to other languages
+ as part of the normal localization process; for example,
+- a French application might translate 'EST' to 'HNE'.
++ a French application might translate “EST” to “HNE”.
+
+
+ These abbreviations (for standard/daylight/etc. time) are:
+@@ -483,7 +485,7 @@
+ NST/NDT/NWT/NPT/NDDT Newfoundland,
+ NST/NDT/NWT/NPT Nome,
+ NZMT/NZST New Zealand through 1945,
+- NZST/NZDT New Zealand 1946–present,
++ NZST/NZDT New Zealand 1946–present,
+ PKT/PKST Pakistan,
+ PST/PDT/PWT/PPT Pacific,
+ PST/PDT Philippine,
+@@ -500,12 +502,12 @@
+
+
+
+- For times taken from a city's longitude, use the
++ For times taken from a city’s longitude, use the
+ traditional xMT notation.
+- The only abbreviation like this in current use is 'GMT'.
++ The only abbreviation like this in current use is GMT.
+ The others are for timestamps before 1960,
+ except that Monrovia Mean Time persisted until 1972.
+- Typically, numeric abbreviations (e.g., '-004430' for
++ Typically, numeric abbreviations (e.g., -004430 for
+ MMT) would cause trouble here, as the numeric strings would exceed
+ the POSIX length limit.
+
+@@ -546,39 +548,39 @@
+ A few abbreviations also follow the pattern that
+ GMT/BST established for time in the UK.
+ They are:
+- BMT/BST for Bermuda 1890–1930,
++ BMT/BST for Bermuda 1890–1930,
+ CMT/BST for Calamarca Mean Time and Bolivian Summer Time
+- 1890–1932,
++ 1890–1932,
+ DMT/IST for Dublin/Dunsink Mean Time and Irish Summer Time
+- 1880–1916,
+- MMT/MST/MDST for Moscow 1880–1919, and
+- RMT/LST for Riga Mean Time and Latvian Summer time 1880–1926.
++ 1880–1916,
++ MMT/MST/MDST for Moscow 1880–1919, and
++ RMT/LST for Riga Mean Time and Latvian Summer time 1880–1926.
+
+
+
+
+- Use 'LMT' for local mean time of locations before the
+- introduction of standard time; see "Scope of the
+- tz database".
++ Use “LMT” for local mean time of locations before the
++ introduction of standard time; see “Scope of the
++ tz database”.
+
+
+ If there is no common English abbreviation, use numeric offsets like
+ -05 and +0530 that are generated
+- by zic's %z notation.
++ by zic’s %z notation.
+
+
+ Use current abbreviations for older timestamps to avoid confusion.
+ For example, in 1910 a common English abbreviation for time
+- in central Europe was 'MEZ' (short for both "Middle European
+- Zone" and for "Mitteleuropäische Zeit" in German).
+- Nowadays 'CET' ("Central European Time") is more common in
+- English, and the database uses 'CET' even for circa-1910
++ in central Europe was “MEZ” (short for both “Middle European
++ Zone” and for “Mitteleuropäische Zeit” in German).
++ Nowadays “CET” (“Central European Time”) is more common in
++ English, and the database uses “CET” even for circa-1910
+ timestamps as this is less confusing for modern users and avoids
+- the need for determining when 'CET' supplanted 'MEZ' in common
++ the need for determining when “CET” supplanted “MEZ” in common
+ usage.
+
+
+- Use a consistent style in a timezone's history.
++ Use a consistent style in a timezone’s history.
+ For example, if a history tends to use numeric
+ abbreviations and a particular entry could go either way, use a
+ numeric abbreviation.
+@@ -586,13 +588,13 @@
+
+ Use
+ Universal Time
+- (UT) (with time zone abbreviation '-00') for
++ (UT) (with time zone abbreviation -00) for
+ locations while uninhabited.
+- The leading '-' is a flag that the UT offset is in
++ The leading "-" is a flag that the UT offset is in
+ some sense undefined; this notation is derived
+ from Internet
+ RFC 3339.
+- (The abbreviation 'Z' that
++ (The abbreviation Z that
+ Internet
+ RFC 9557 uses for this concept
+ would violate the POSIX requirement
+@@ -602,11 +604,11 @@
+
+
+ Application writers should note that these abbreviations are ambiguous
+-in practice: e.g., 'CST' means one thing in China and something else
+-in North America, and 'IST' can refer to time in India, Ireland or
++in practice: e.g., CST means one thing in China and something else
++in North America, and IST can refer to time in India, Ireland or
+ Israel.
+ To avoid ambiguity, use numeric UT offsets like
+-'-0600' instead of time zone abbreviations like 'CST'.
++-0600 instead of time zone abbreviations like CST.
+
+
+
+@@ -617,7 +619,7 @@
+ surely has errors.
+ Corrections are welcome and encouraged; see the file CONTRIBUTING.
+ Users requiring authoritative data should consult national standards
+-bodies and the references cited in the database's comments.
++bodies and the references cited in the database’s comments.
+
+
+
+@@ -639,7 +641,7 @@
+ clocks actually behaved; the vast majority of the necessary
+ information was lost or never recorded.
+ Thousands more timezones would be needed if
+- the tz database's scope were extended to
++ the tz database’s scope were extended to
+ cover even just the known or guessed history of standard time; for
+ example, the current single entry for France would need to split
+ into dozens of entries, perhaps hundreds.
+@@ -648,14 +650,14 @@
+ should be observed.
+ In her 2015 book
+ The
+- Global Transformation of Time, 1870–1950,
++ href="https://www.hup.harvard.edu/books/9780674286146">The
++ Global Transformation of Time, 1870–1950,
+ Vanessa Ogle writes
+- "Outside of Europe and North America there was no system of time
++ “Outside of Europe and North America there was no system of time
+ zones at all, often not even a stable landscape of mean times,
+- prior to the middle decades of the twentieth century".
++ prior to the middle decades of the twentieth century”.
+ See: Timothy Shenk, Booked:
++href="https://dissentmagazine.org/blog/booked-a-global-history-of-time-vanessa-ogle/">Booked:
+ A Global History of Time. Dissent 2015-12-17.
+
+@@ -697,13 +699,13 @@
+ entries are often accurate for only a small subset of that region.
+ For example, Europe/London stands for the United
+ Kingdom, but its pre-1847 times are valid only for locations that
+- have London's exact meridian, and its 1847 transition
++ have London’s exact meridian, and its 1847 transition
+ to GMT is known to be valid only for the L&NW and
+ the Caledonian railways.
+
+
+ The tz database does not record the
+- earliest time for which a timezone's
++ earliest time for which a timezone’s
+ data entries are thereafter valid for every location in the region.
+ For example, Europe/London is valid for all locations
+ in its region after GMT was made the standard time,
+@@ -714,7 +716,7 @@
+
+
+ The tz database does not record a
+- region's boundaries, and in many cases the boundaries are not known.
++ region’s boundaries, and in many cases the boundaries are not known.
+ For example, the timezone
+ America/Kentucky/Louisville represents a region
+ around the city of Louisville, the boundaries of which are
+@@ -747,7 +749,7 @@
+ than what the tz code can handle.
+ For example, from 1880 to 1916 clocks in Ireland observed Dublin Mean
+ Time (estimated to be UT
+- −00:25:21.1); although the tz
++ −00:25:21.1); although the tz
+ source data can represent the .1 second, TZif files and the code cannot.
+ In practice these old specifications were rarely if ever
+ implemented to subsecond precision.
+@@ -787,9 +789,9 @@
+ non-hour-based system at night.
+ And even today, some local practices diverge from the Gregorian
+ calendar with 24-hour days. These divergences range from
+- relatively minor, such as Japanese bars giving times like "24:30" for the
++ relatively minor, such as Japanese bars giving times like 24:30 for the
+ wee hours of the morning, to more-significant differences such as the
++ href="https://theworld.org/stories/2015/01/30/ethiopian-time">the
+ east African practice of starting the day at dawn, renumbering
+ the Western 06:00 to be 12:00. These practices are largely outside
+ the scope of the tz code and data, which
+@@ -825,16 +827,16 @@
+
+ Civil time was not based on atomic time before 1972, and we do not
+ know the history of
+- earth's
++ earth’s
+ rotation accurately enough to map SI seconds to
+ historical solar time
+ to more than about one-hour accuracy.
+- See: Stephenson FR, Morrison LV, Hohenkerk CY.
+- Measurement of
+- the Earth's rotation: 720 BC to AD 2015.
+- Proc Royal Soc A. 2016;472:20160404.
++ See: Morrison LV, Stephenson FR, Hohenkerk CY, Zawilski M.
++ Addendum 2020
++ to ‘Measurement of the Earth’s rotation: 720 BC to AD 2015’.
++ Proc Royal Soc A. 2021;477:20200776.
+ Also see: Espenak F. Uncertainty
+ in Delta T (ΔT).
+@@ -843,7 +845,7 @@
+ The relationship between POSIX time (that is, UTC but
+ ignoring leap
+ seconds) and UTC is not agreed upon.
+- This affects time stamps during the leap second era (1972–2035).
++ This affects time stamps during the leap second era (1972–2035).
+ Although the POSIX
+ clock officially stops during an inserted leap second, at least one
+ proposed standard has it jumping back a second instead; and in
+@@ -862,12 +864,12 @@
+
+
+ In short, many, perhaps most, of the tz
+-database's pre-1970 and future timestamps are either wrong or
++database’s pre-1970 and future timestamps are either wrong or
+ misleading.
+ Any attempt to pass the
+ tz database off as the definition of time
+ should be unacceptable to anybody who cares about the facts.
+-In particular, the tz database's
++In particular, the tz database’s
+ LMT offsets should not be considered meaningful, and
+ should not prompt creation of timezones
+ merely because two locations
+@@ -886,7 +888,7 @@
+ primary use of this package is to update obsolete time-related files.
+ To do this, you may need to compile the time zone compiler
+ zic supplied with this package instead of using the
+-system zic, since the format of zic's
++system zic, since the format of zic’s
+ input is occasionally extended, and a platform may still be shipping
+ an older zic.
+
+@@ -914,7 +916,8 @@
+
+
POSIX.1-2017 properties and limitations
+
+-Some platforms support only the features required by POSIX.1-2017,
++Some platforms support only the features required by POSIX.1-2017
++and earlier editions,
+ and have not yet upgraded to POSIX.1-2024.
+ Code intended to be portable to these platforms must deal
+ with problems that were fixed in later POSIX editions.
+@@ -956,14 +959,14 @@
+ are 3 or more characters specifying the standard
+ and daylight saving time (DST) zone abbreviations.
+ Starting with POSIX.1-2001, std and dst
+- may also be in a quoted form like '<+09>';
++ may also be quoted in angle brackets, like <+09>;
+ this allows "+" and "-" in the names.
+
+
offset
+ is of the form
+- '[±]hh:[mm[:ss]]'
++ [±]hh:[mm[:ss]]
+ and specifies the offset west of UT.
+- 'hh' may be a single digit;
++ hh may be a single digit;
+ 0≤hh≤24.
+ The default DST offset is one hour ahead of
+ standard time.
+@@ -976,10 +979,10 @@
+
+
time
+ takes the form
+- 'hh:[mm[:ss]]'
++ hh:[mm[:ss]]
+ and defaults to 02:00.
+ This is the same format as the offset, except that a
+- leading '+' or '-' is not allowed.
++ leading "+" or "-" is not allowed.
+
+
date
+ takes one of the following forms:
+@@ -996,7 +999,7 @@
+ for the dth day of week n of
+ month m of the year, where week 1 is the first
+ week in which day d appears, and
+- '5' stands for the last week in which
++ "5" stands for the last week in which
+ day d appears (which may be either the 4th or
+ 5th week).
+ Typically, this is the only useful form; the n
+@@ -1011,8 +1014,8 @@
+ Zealand after 2007.
+ It says that standard time (NZST) is 12 hours ahead
+ of UT, and that daylight saving time
+- (NZDT) is observed from September's last Sunday at
+- 02:00 until April's first Sunday at 03:00:
++ (NZDT) is observed from September’s last Sunday at
++ 02:00 until April’s first Sunday at 03:00:
+
+
+
+- DST transition times can range from −167:59:59
++ DST transition times can range from −167:59:59
+ to 167:59:59 instead of merely from 00:00:00 to 24:59:59.
+ This allows for proleptic TZ strings
+ like "<-02>2<-01>,M3.5.0/-1,M10.5.0/0"
+- where the transition time −1:00 means 23:00 the previous day.
++ where the transition time −1:00 means 23:00 the previous day.
+
+
+
+@@ -1065,14 +1068,14 @@
+
+
+ In POSIX, there is no tamper-proof way for a process to learn the
+- system's best idea of local (wall clock) time.
++ system’s best idea of local (wall clock) time.
+ This is important for applications that an administrator wants
+- used only at certain times – without regard to whether the
++ used only at certain times – without regard to whether the
+ user has fiddled the
+ TZ environment variable.
+- While an administrator can "do everything in UT" to
++ While an administrator can “do everything in UT” to
+ get around the problem, doing so is inconvenient and precludes
+- handling daylight saving time shifts – as might be required to
++ handling daylight saving time shifts – as might be required to
+ limit phone calls to off-peak hours.
+
+
+@@ -1081,8 +1084,7 @@
+
+
+ POSIX does not define the DST transitions
+- for TZ values like
+- "EST5EDT".
++ for settings like TZ='EST5EDT'.
+ Traditionally the current US DST rules
+ were used to interpret such values, but this meant that the
+ US DST rules were compiled into each
+@@ -1124,9 +1126,9 @@
+ If the TZ environment variable uses the geographical format,
+ it is used in generating
+ the name of a file from which time-related information is read.
+- The file's format is TZif,
++ The file’s format is TZif,
+ a timezone information format that contains binary data; see
+- Internet
++ Internet
+ RFC 9636.
+ The daylight saving time rules to be used for a
+ particular timezone are encoded in the
+@@ -1138,18 +1140,18 @@
+
+ When the tz code was developed in the 1980s,
+ it was recognized that allowing the TZ environment
+- variable to take on values such as 'America/New_York'
+- might cause "old" programs (that expect TZ to have a
++ variable to take on values such as America/New_York
++ might cause old programs (that expect TZ to have a
+ certain format) to operate incorrectly; consideration was given to using
+ some other environment variable (for example, TIMEZONE)
+- to hold the string used to generate the TZif file's name.
++ to hold the string used to generate the TZif file’s name.
+ In the end, however, it was decided to continue using
+ TZ: it is widely used for time zone purposes;
+ separately maintaining both TZ
+ and TIMEZONE seemed a nuisance; and systems where
+- "new" forms of TZ might cause problems can simply
+- use legacy TZ values such as "EST5EDT" which
+- can be used by "new" programs as well as by "old" programs that
++ new forms of TZ might cause problems can simply
++ use legacy settings such as TZ='EST5EDT' which
++ can be used by new programs as well as by old programs that
+ assume pre-POSIX TZ values.
+
+
+@@ -1192,20 +1194,20 @@
+ The POSIX tzname variable does not suffice and is no
+ longer needed.
+ It is planned to be removed in a future edition of POSIX.
+- To get a timestamp's time zone abbreviation, consult
++ To get a timestamp’s time zone abbreviation, consult
+ the tm_zone member if available; otherwise,
+- use strftime's "%Z" conversion
++ use strftime’s "%Z" conversion
+ specification.
+
+
+ The POSIX daylight and timezone
+ variables do not suffice and are no longer needed.
+ They are planned to be removed in a future edition of POSIX.
+- To get a timestamp's UT offset, consult
++ To get a timestamp’s UT offset, consult
+ the tm_gmtoff member if available; otherwise,
+ subtract values returned by localtime
+ and gmtime using the rules of the Gregorian calendar,
+- or use strftime's "%z" conversion
++ or use strftime’s "%z" conversion
+ specification if a string like "+0900" suffices.
+
+
+@@ -1230,9 +1232,9 @@
+
+ The 7th Edition
+ UNIXtimezone function is not present in this
+- package; it is impossible to reliably map timezone's
+- arguments (a "minutes west of GMT" value and a
+- "daylight saving time in effect" flag) to a time zone
++ package; it is impossible to reliably map timezone’s
++ arguments (a “minutes west of GMT” value and a
++ “daylight saving time in effect” flag) to a time zone
+ abbreviation, and we refuse to guess.
+ Programs that in the past used the timezone function
+ may now examine localtime(&clock)->tm_zone
+@@ -1262,7 +1264,7 @@
+ The functions that are conditionally compiled
+ if STD_INSPIRED is nonzero should, at this point, be
+ looked on primarily as food for thought.
+- They are not in any sense "standard compatible" – some are
++ They are not in any sense “standard compatible” – some are
+ not, in fact, specified in any standard.
+ They do, however, represent responses of various authors to
+ standardization proposals.
+@@ -1293,11 +1295,11 @@
+
+ The programs tzselect, zdump,
+@@ -1319,7 +1321,7 @@
+
+
+ The version number of the code and data, as the first line of
+- the text file 'version' in each release.
++ the text file "version" in each release.
+
+
+
+@@ -1347,7 +1349,7 @@
+ currently includes Chang Mai, Hanoi, and Phnom Penh, this is not part
+ of the stable interface and the timezone can split at any time.
+ If a calendar application records a future event in some location other
+-than Bangkok by putting "Asia/Bangkok" in the event's record,
++than Bangkok by putting Asia/Bangkok in the event’s record,
+ the application should be robust in the presence of timezone splits
+ between now and the future time.
+
+@@ -1381,7 +1383,7 @@
+ NTP
+ software that adjusts the kernel clock.
+ However, kernel-clock twiddling approximates UTC only roughly,
+-and systems needing more precise UTC can use this package's leap
++and systems needing more precise UTC can use this package’s leap
+ second support directly.
+
+
+@@ -1391,8 +1393,8 @@
+ as opposed to POSIX time_t counts which exclude leap seconds.
+ This modified timescale is converted to UTC
+ at the same point that time zone and DST
+-adjustments are applied –
+-namely, at calls to localtime and analogous functions –
++adjustments are applied –
++namely, at calls to localtime and analogous functions –
+ and the process is driven by leap second information
+ stored in alternate versions of the TZif files.
+ Because a leap second adjustment may be needed even
+@@ -1402,7 +1404,7 @@
+ conventionally named Etc/UTC
+ (GMT in previous versions),
+ to see whether leap second corrections are needed.
+-To convert an application's time_t timestamps to or from
++To convert an application’s time_t timestamps to or from
+ POSIX time_t timestamps (for use when, say,
+ embedding or interpreting timestamps in portable
+ tar
+@@ -1425,7 +1427,7 @@
+ discard zoneinfo and rename zoneinfo-leaps
+ to zoneinfo.
+ Alternatively, you can install just one set of TZif files
+-in the first place; see the REDO variable in this package's
++in the first place; see the REDO variable in this package’s
+ makefile.
+
+
+@@ -1438,9 +1440,9 @@
+ extended the time zone database further into the past.
+ An excellent resource in this area is Edward M. Reingold
+ and Nachum Dershowitz, Calendrical
++href="https://www.cambridge.org/fr/universitypress/subjects/computer-science/computing-general-interest/calendrical-calculations-ultimate-edition-4th-edition">Calendrical
+ Calculations: The Ultimate Edition, Cambridge University Press (2018).
+-Other information and sources are given in the file 'calendars'
++Other information and sources are given in the file "calendars"
+ in the tz distribution.
+ They sometimes disagree.
+
+@@ -1450,20 +1452,20 @@
+
Time and time zones off Earth
+
+ The European Space Agency is considering
++href="https://www.esa.int/Applications/Satellite_navigation/Telling_time_on_the_Moon">considering
+ the establishment of a reference timescale for the Moon, which has
+ days roughly equivalent to 29.5 Earth days, and where relativistic
+ effects cause clocks to tick slightly faster than on Earth.
+ Also, NASA
+ has been ordered
++href="https://bidenwhitehouse.archives.gov/wp-content/uploads/2024/04/Celestial-Time-Standardization-Policy.pdf">ordered
+ to consider the establishment of Coordinated Lunar Time (LTC).
+ It is not yet known whether the US and European efforts will result in
+ multiple timescales on the Moon.
+
+
+
+-Some people's work schedules have used
++Some people’s work schedules have used
+ Mars time.
+ Jet Propulsion Laboratory (JPL) coordinators kept Mars time on
+ and off during the
+@@ -1473,7 +1475,7 @@
+ Dozens of special Mars watches were built for JPL workers who kept
+ Mars time during the
+ Mars
+-Exploration Rovers (MER) mission (2004–2018).
++Exploration Rovers (MER) mission (2004–2018).
+ These timepieces looked like normal Seikos and Citizens but were adjusted
+ to use Mars seconds rather than terrestrial seconds, although
+ unfortunately the adjusted watches were unreliable and appear to have
+@@ -1481,12 +1483,12 @@
+
+
+
+-A Mars solar day is called a "sol" and has a mean period equal to
++A Mars solar day is called a “sol” and has a mean period equal to
+ about 24 hours 39 minutes 35.244 seconds in terrestrial time.
+ It is divided into a conventional 24-hour clock, so each Mars second
+ equals about 1.02749125 terrestrial seconds.
+-(One MER worker noted, "If I am working Mars hours, and Mars hours are
+-2.5% more than Earth hours, shouldn't I get an extra 2.5% pay raise?")
++(One MER worker noted, “If I am working Mars hours, and Mars hours are
++2.5% more than Earth hours, shouldn’t I get an extra 2.5% pay raise?”)
+
+
+
+@@ -1494,7 +1496,7 @@
+ meridian of Mars goes through the center of the crater
+ Airy-0, named in
+ honor of the British astronomer who built the Greenwich telescope that
+-defines Earth's prime meridian.
++defines Earth’s prime meridian.
+ Mean solar time on the Mars prime meridian is
+ called Mars Coordinated Time (MTC).
+
+@@ -1502,13 +1504,13 @@
+
+ Each landed mission on Mars has adopted a different reference for
+ solar timekeeping, so there is no real standard for Mars time zones.
+-For example, the MER mission defined two time zones "Local
+-Solar Time A" and "Local Solar Time B" for its two missions, each zone
++For example, the MER mission defined two time zones “Local
++Solar Time A” and “Local Solar Time B” for its two missions, each zone
+ designed so that its time equals local true solar time at
+ approximately the middle of the nominal mission.
+ The A and B zones differ enough so that an MER worker assigned to
+-the A zone might suffer "Mars lag" when switching to work in the B zone.
+-Such a "time zone" is not particularly suited for any application
++the A zone might suffer “Mars lag” when switching to work in the B zone.
++Such a “time zone” is not particularly suited for any application
+ other than the mission itself.
+
+
+@@ -1522,13 +1524,13 @@
+
+
+ In our solar system, Mars is the planet with time and calendar most
+-like Earth's.
++like Earth’s.
+ On other planets, Sun-based time and calendars would work quite
+ differently.
+-For example, although Mercury's
++For example, although Mercury’s
+ sidereal
+ rotation period is 58.646 Earth days, Mercury revolves around the
+-Sun so rapidly that an observer on Mercury's equator would see a
++Sun so rapidly that an observer on Mercury’s equator would see a
+ sunrise only every 175.97 Earth days, i.e., a Mercury year is 0.5 of a
+ Mercury day.
+ Venus is more complicated, partly because its rotation is slightly
+@@ -1554,8 +1556,8 @@
+