Index: stable/10/release/doc/en_US.ISO8859-1/errata/article.xml
===================================================================
--- stable/10/release/doc/en_US.ISO8859-1/errata/article.xml	(revision 293911)
+++ stable/10/release/doc/en_US.ISO8859-1/errata/article.xml	(revision 293912)
@@ -1,293 +1,293 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   "http://www.FreeBSD.org/XML/share/xml/freebsd50.dtd" [
 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN"
   "http://www.FreeBSD.org/release/XML/release.ent">
 %release;
 <!ENTITY security SYSTEM "../../share/xml/security.xml">
 <!ENTITY errata SYSTEM "../../share/xml/errata.xml">
 ]>
 
 <article xmlns="http://docbook.org/ns/docbook"
   xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
 
   <info>
     <title>&os; &release.prev; Errata </title>
 
     <author><orgname>The &os; Project</orgname></author>
 
     <pubdate>$FreeBSD$</pubdate>
 
     <copyright>
-      <year>2015</year>
+      <year>2016</year>
 
       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
 	Project</holder>
     </copyright>
 
     <legalnotice xml:id="trademarks" role="trademarks">
       &tm-attrib.freebsd;
       &tm-attrib.intel;
       &tm-attrib.sparc;
       &tm-attrib.general;
     </legalnotice>
 
     <abstract>
       <para>This document lists errata items for &os; &release.prev;,
 	containing significant information discovered after the
 	release or too late in the release cycle to be otherwise
 	included in the release documentation.  This information
 	includes security advisories, as well as news relating to the
 	software or documentation that could affect its operation or
 	usability.  An up-to-date version of this document should
 	always be consulted before installing this version of
 	&os;.</para>
 
       <para>This errata document for &os; &release.prev; will be
 	maintained until the release of &os; &release.next;.</para>
     </abstract>
   </info>
 
   <sect1 xml:id="intro">
     <title>Introduction</title>
 
     <para>This errata document contains <quote>late-breaking
 	news</quote> about &os; &release.prev; Before installing this
       version, it is important to consult this document to learn about
       any post-release discoveries or problems that may already have
       been found and fixed.</para>
 
     <para>Any version of this errata document actually distributed
       with the release (for example, on a CDROM distribution) will be
       out of date by definition, but other copies are kept updated on
       the Internet and should be consulted as the <quote>current
 	errata</quote> for this release.  These other copies of the
       errata are located at <link
 	xlink:href="https://www.FreeBSD.org/releases/" />, plus any
       sites which keep up-to-date mirrors of this location.</para>
 
     <para>Source and binary snapshots of &os; &release.branch; also
       contain up-to-date copies of this document (as of the time of
       the snapshot).</para>
 
     <para>For a list of all &os; CERT security advisories, see <link
 	xlink:href="https://www.FreeBSD.org/security/"/>.</para>
   </sect1>
 
   <sect1 xml:id="security">
     <title>Security Advisories</title>
 
     &security;
   </sect1>
 
   <sect1 xml:id="errata">
     <title>Errata Notices</title>
 
     &errata;
   </sect1>
 
   <sect1 xml:id="open-issues">
     <title>Open Issues</title>
 
     <itemizedlist>
       <listitem>
 	<para>&os;/&arch.i386; &release.prev; running as a guest
 	  operating system on <application>VirtualBox</application>
 	  can have a problem with disk I/O access.  It depends on some
 	  specific hardware configuration and does not depend on a
 	  specific version of <application>VirtualBox</application> or
 	  host operating system.</para>
 
 	<para>It has been reported that instability may be present on
 	  virtual machines running on other hypervisors, such as Xen
 	  or KVM.</para>
 
 	<para>It causes various errors and makes &os; quite unstable.
 	  Although the cause is still unclear, disabling unmapped I/O
 	  works as a workaround.  To disable it, choose
 	  <literal>Escape to loader prompt</literal> in the boot menu
 	  and enter the following lines from &man.loader.8; prompt,
 	  after an <literal>OK</literal>:</para>
 
 	<screen>set vfs.unmapped_buf_allowed=0
 boot</screen>
 
 	<para>Note that the following line has to be added to
 	  <filename>/boot/loader.conf</filename> after a boot.  It
 	  disables unmapped I/O at every boot:</para>
 
 	<programlisting>vfs.unmapped_buf_allowed=0</programlisting>
       </listitem>
 
       <listitem>
 	<para>&os;/&arch.i386;&nbsp;&release.prev; installed on ZFS
 	  may crash during boot when the ZFS pool mount is attempted
 	  while booting an unmodified <literal>GENERIC</literal>
 	  kernel.</para>
 
 	<para>As described in <filename>/usr/src/UPDATING</filename>
 	  entry <literal>20121223</literal>, rebuilding the kernel
 	  with <literal>options KSTACK_PAGES=4</literal> has been
 	  observed to resolve the boot-time crash.  This, however, is
 	  not an ideal solution for inclusion in the
 	  <literal>GENERIC</literal> kernel configuration, as
 	  increasing <literal>KSTACK_PAGES</literal> implicitly
 	  decreases available usermode threads in an environment that
 	  is already resource-starved.</para>
 
 	<para>Taking into account the heavy resource requirements of
 	  ZFS, in addition to the &arch.i386;-specific tuning
 	  requirements for general workloads, using ZFS with the
 	  &os;/&arch.i386;&nbsp;<literal>GENERIC</literal> kernel
 	  is strongly discouraged.</para>
 
 	<para>If installing &os;/&arch.i386; on ZFS, it is possible to
 	  configure the system after installation to increase the
 	  <literal>KSTACK_PAGES</literal>.</para>
 
 	<para>When prompted by &man.bsdinstall.8; to perform
 	  additional post-installation configuration to the system,
 	  select <guibutton>[&nbsp;YES&nbsp;]</guibutton>.</para>
 
 	<para>This procedure requires the system sources available
 	  locally.  If the <literal>System source code</literal>
 	  distribution was not selected during installation, it can
 	  be obtained using <application>svnlite</application>:</para>
 
 	<screen>&prompt.root; mkdir -p /usr/src
 &prompt.root; svnlite co svn://svn.freebsd.org/base/releng/10.2 /usr/src</screen>
 
 	<para>Build the <literal>kernel-toolchain</literal> required
 	  to rebuild the kernel:</para>
 
 	<screen>&prompt.root; make -C /usr/src kernel-toolchain</screen>
 
 	<para>Next, create a kernel configuration file to increase the
 	  <literal>KSTACK_PAGES</literal> option:</para>
 
 	<screen>&prompt.root; printf "include GENERIC\noptions KSTACK_PAGES=4\n" &gt; <filename>/usr/src/sys/i386/conf/<replaceable>ZFS</replaceable></filename></screen>
 
 	<para>Then build and install the
 	  <replaceable>ZFS</replaceable> kernel:</para>
 
 	<screen>&prompt.root; make -C /usr/src buildkernel KERNCONF=<replaceable>ZFS</replaceable>
 &prompt.root; make -C /usr/src installkernel KERNCONF=<replaceable>ZFS</replaceable></screen>
 
 	<warning>
 	  <para>It is extremely important to take note that, by
 	    default, &man.freebsd-update.8; will install the
 	    <literal>GENERIC</literal> kernel configuration, and
 	    as such, &man.freebsd-update.8; consumers are strongly
 	    encouraged to avoid &os;-provided kernel binary upgrades
 	    with such configurations.</para>
 	</warning>
       </listitem>
 
       <listitem>
 	<para>Due to an incompatibility between &man.bsdconfig.8;
 	  and &man.pkg.8;, packages included on the &os;&nbsp;dvd
 	  installer will not be recognized by
 	  &man.bsdconfig.8;.</para>
 
 	<para>To install packages from the <literal>dvd1.iso</literal>
 	  installer, create the <filename
 	    class="directory">/dist</filename> target directory, and
 	  manually mount the <literal>dvd1.iso</literal>
 	  <acronym>ISO</acronym>:</para>
 
 	<screen>&prompt.root; mkdir -p /dist
 &prompt.root; mount -t cd9660 /dev/<replaceable>cd0</replaceable> /dist</screen>
 
 	<note>
 	  <para>Be sure to use the correct <filename
 	      class="directory">/dev</filename> device path for the
 	    <literal>dvd1.iso</literal> <acronym>ISO</acronym>
 	    installer.</para>
 	</note>
 
 	<para>Next, set <envar>REPOS_DIR</envar> to the path of the
 	  <filename class="directory">repos/</filename> directory
 	  within the installer so &man.pkg.8; will use the correct
 	  repository metadata.</para>
 
 	<para>If using &man.sh.1;:</para>
 
 	<screen>&prompt.root; export REPOS_DIR=/dist/packages/repos</screen>
 
 	<para>If using &man.csh.1;:</para>
 
 	<screen>&prompt.root; setenv REPOS_DIR /dist/packages/repos</screen>
 
 	<note>
 	  <para>Keep in mind that <envar>REPOS_DIR</envar> will need
 	    to be set again after the current shell session is
 	    terminated, if continuing to use the packages provided on
 	    the <literal>dvd1.iso</literal> installer.</para>
 	</note>
 
 	<para>Finally, bootstrap &man.pkg.8; from the
 	  <acronym>ISO</acronym>, and install required
 	  packages:</para>
 
 	<screen>&prompt.root; pkg bootstrap
 &prompt.root; pkg install <replaceable>xorg-server</replaceable> <replaceable>xorg</replaceable> <replaceable>gnome3</replaceable> [...]</screen>
       </listitem>
 
       <listitem>
 	<para>An issue was discovered where the &man.netstat.1;
 	  <literal>-s</literal> option will cause a segmentation fault
 	  on systems with <literal>IPSEC</literal> compiled into the
 	  kernel.  The issue was resolved in the
 	  <literal>stable/10</literal> branch, and an Errata Notice is
 	  planned after &release.prev; is released.</para>
 
 	<para>[2015-08-19] Resolved as FreeBSD-EN-15:12.</para>
       </listitem>
 
       <listitem>
 	<para>An issue was discovered that causes &man.make.1; to
 	  generate noisy output when doing source-based upgrades from
 	  &os; 9.3 and earlier.  The issue was reported in PR 202277,
 	  and after investigation and determining the issue does not
 	  cause source-based upgrades to fail, a post-release Errata
 	  Notice is planned.</para>
 
 	<para>[2015-08-19] Resolved as FreeBSD-EN-15:11.</para>
       </listitem>
 
       <listitem>
 	<para>An issue with &os; virtual machines with
 	  <application>vagrant</application> was discovered that
 	  affects the <application>VirtualBox</application> where the
 	  virtual machine will not start on the initial boot invoked
 	  with <literal>vagrant up</literal>.</para>
 
 	<para>The issue is due to the virtual machine
 	  <acronym>MAC</acronym> being unset, as &os; does not provide
 	  a default <filename>Vagrantfile</filename>.</para>
 
 	<para>It has been observed, however, that a subsequent
 	  invocation of <literal>vagrant up</literal> will allow the
 	  virtual machine to successfully boot, allowing access via
 	  <literal>vagrant ssh</literal>.</para>
       </listitem>
 
       <listitem>
 	<para>[2015-08-16] An error was discovered in the release
 	  notes for &os; &release.prev; regarding the
 	  <literal>drm</literal> device driver.  The entry for r282199
 	  states the driver was updated to match the version &linux;
 	  3.8.13 version, however the entry should have noted the
 	  change affects device-independent code, and does not bring
 	  the <literal>drm</literal> driver fully in line with the
 	  stated &linux; version.</para>
       </listitem>
     </itemizedlist>
   </sect1>
 
   <sect1 xml:id="late-news">
     <title>Late-Breaking News</title>
 
     <para>No news.</para>
   </sect1>
 </article>
Index: stable/10/release/doc/share/xml/errata.xml
===================================================================
--- stable/10/release/doc/share/xml/errata.xml	(revision 293911)
+++ stable/10/release/doc/share/xml/errata.xml	(revision 293912)
@@ -1,94 +1,117 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!--
      The FreeBSD Documentation Project
 
      $FreeBSD$
 -->
 <informaltable frame="none" pgwide="1">
   <tgroup cols="3">
     <colspec colwidth="40%"/>
     <colspec colwidth="30%"/>
     <colspec colwidth="30%"/>
     <thead>
       <row>
 	<entry>Errata</entry>
 	<entry>Date</entry>
 	<entry>Topic</entry>
       </row>
     </thead>
 
     <tbody>
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:11.toolchain.asc">FreeBSD-EN-15:11.toolchain</link></entry>
 	<entry>18&nbsp;August&nbsp;2015</entry>
 	<entry><para>Fix &man.make.1; syntax errors when upgrading
 	    from &os;&nbsp;9.x and earlier.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:12.netstat.asc">FreeBSD-EN-15:12.netstat</link></entry>
 	<entry>18&nbsp;August&nbsp;2015</entry>
 	<entry><para>Fix incorrect &man.netstat.1; data handling on
 	    32-bit systems.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:13.vidcontrol.asc">FreeBSD-EN-15:13.vidcontrol</link></entry>
 	<entry>18&nbsp;August&nbsp;2015</entry>
 	<entry><para>Allow size argument to &man.vidcontrol.1; for
 	    &man.syscons.4;.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:15.pkg.asc">FreeBSD-EN-15:15.pkg</link></entry>
 	<entry>25&nbsp;August&nbsp;2015</entry>
 	<entry><para>Insufficient check of supported &man.pkg.7;
 	  signature methods.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:16.pw.asc">FreeBSD-EN-15:16.pw</link></entry>
 	<entry>16&nbsp;September&nbsp;2015</entry>
 	<entry><para>Fix &man.pw.8; regression when creating numeric
 	    users or groups.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:17.libc.asc">FreeBSD-EN-15:17.libc</link></entry>
 	<entry>16&nbsp;September&nbsp;2015</entry>
 	<entry><para>Fix libc handling of signals for multi-threaded
 	    processes.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:18.pkg.asc">FreeBSD-EN-15:18.pkg</link></entry>
 	<entry>16&nbsp;September&nbsp;2015</entry>
 	<entry><para>Implement <literal>pubkey</literal> support for
 	    &man.pkg.7; bootstrap.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:19.kqueue.asc">FreeBSD-EN-15:19.kqueue</link></entry>
 	<entry>4&nbsp;November&nbsp;2015</entry>
 	<entry><para>&man.kqueue.2; write events never fire for files
 	    larger than 2GB.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:20.vm.asc">FreeBSD-EN-15:20.vm</link></entry>
 	<entry>4&nbsp;November&nbsp;2015</entry>
 	<entry><para>Applications exiting due to segmentation
 	    violation on a correct memory address.</para></entry>
       </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-EN-16:01.filemon.asc">FreeBSD-EN-16:01.filemon</link></entry>
+	<entry>14&nbsp;January&nbsp;2016</entry>
+	<entry><para><application>bmake</application> and
+	    &man.filemon.4; stability issues.</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-EN-16:02.pf.asc">FreeBSD-EN-16:02.pf</link></entry>
+	<entry>14&nbsp;January&nbsp;2016</entry>
+	<entry><para>Invalid TCP checksum issue.</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-EN-16:03.yplib.asc">FreeBSD-EN-16:03.yplib</link></entry>
+	<entry>14&nbsp;January&nbsp;2016</entry>
+	<entry><para><application>YP/NIS</application> library
+	    bug.</para></entry>
+      </row>
     </tbody>
   </tgroup>
 </informaltable>
Index: stable/10/release/doc/share/xml/security.xml
===================================================================
--- stable/10/release/doc/share/xml/security.xml	(revision 293911)
+++ stable/10/release/doc/share/xml/security.xml	(revision 293912)
@@ -1,58 +1,104 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!--
      The FreeBSD Documentation Project
 
      $FreeBSD$
 -->
 <informaltable frame="none" pgwide="1">
   <tgroup cols="3">
     <colspec colwidth="40%"/>
     <colspec colwidth="30%"/>
     <colspec colwidth="30%"/>
     <thead>
       <row>
 	<entry>Advisory</entry>
 	<entry>Date</entry>
 	<entry>Topic</entry>
       </row>
     </thead>
 
     <tbody>
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:20.expat.asc">FreeBSD-SA-15:20.expat</link></entry>
 	<entry>18&nbsp;August&nbsp;2015</entry>
 	<entry><para>Fix multiple integer overflows in
 	    &man.libbsdxml.3;.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:22.openssh.asc">FreeBSD-SA-15:22.openssh</link></entry>
 	<entry>25&nbsp;August&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:24.rpcbind.asc">FreeBSD-SA-15:24.rpcbind</link></entry>
 	<entry>29&nbsp;September&nbsp;2015</entry>
 	<entry><para>Remote denial of service</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:25.ntp.asc">FreeBSD-SA-15:25.ntp</link></entry>
 	<entry>26&nbsp;October&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:26.openssl.asc">FreeBSD-SA-15:26.openssl</link></entry>
 	<entry>5&nbsp;December&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:01.sctp.asc">FreeBSD-SA-16:01.sctp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>ICMPv6 error message vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:02.ntp.asc">FreeBSD-SA-16:02.ntp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Panic threshold bypass
+	    vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:03.linux.asc">FreeBSD-SA-16:03.linux</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Incorrect <literal>futex</literal>
+	    handling</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:04.linux.asc">FreeBSD-SA-16:04.linux</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>&man.setgroups.2; system call
+	    vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:05.tcp.asc">FreeBSD-SA-16:05.tcp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>MD5 signature denial of service</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:06.bsnmpd.asc">FreeBSD-SA-16:06.bsnmpd</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Insecure default configuration file
+	  permissions</para></entry>
+      </row>
     </tbody>
   </tgroup>
 </informaltable>
Index: stable/9/release/doc/en_US.ISO8859-1/errata/article.xml
===================================================================
--- stable/9/release/doc/en_US.ISO8859-1/errata/article.xml	(revision 293911)
+++ stable/9/release/doc/en_US.ISO8859-1/errata/article.xml	(revision 293912)
@@ -1,105 +1,105 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
         "../../../share/xml/freebsd50.dtd" [
 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
 %release;
 <!ENTITY security SYSTEM "../../share/xml/security.xml">
 <!ENTITY errata SYSTEM "../../share/xml/errata.xml">
 ]>
 <!--
 	FreeBSD errata document.  Unlike some of the other RELNOTESng
 	files, this file should remain as a single SGML file, so that
 	the dollar FreeBSD dollar header has a meaningful modification
 	time.  This file is all but useless without a datestamp on it,
 	so we'll take some extra care to make sure it has one.
 
 	(If we didn't do this, then the file with the datestamp might
 	not be the one that received the last change in the document.)
 
 -->
 <article xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
   <info><title>&os; &release.current; Errata</title>
     
 
     <author><orgname>
     The &os; Project
     </orgname></author>
 
     <pubdate>$FreeBSD$</pubdate>
 
     <copyright>
-      <year>2015</year>
+      <year>2016</year>
       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
     </copyright>
 
     <legalnotice xml:id="trademarks" role="trademarks">
       &tm-attrib.freebsd;
       &tm-attrib.intel;
       &tm-attrib.sparc;
       &tm-attrib.general;
     </legalnotice>
 
     <abstract>
       <para>This document lists errata items for &os; &release.current;,
         containing significant information discovered after the release
         or too late in the release cycle to be otherwise included in the
         release documentation.
         This information includes security advisories, as well as news
         relating to the software or documentation that could affect its
         operation or usability.  An up-to-date version of this document
         should always be consulted before installing this version of
         &os;.</para>
 
       <para>This errata document for &os; &release.current;
         will be maintained until the EoL of &os; &release.branch;.</para>
     </abstract>
   </info>
 
   <sect1 xml:id="intro">
     <title>Introduction</title>
 
     <para>This errata document contains <quote>late-breaking news</quote>
       about &os; &release.current;
       Before installing this version, it is important to consult this
       document to learn about any post-release discoveries or problems
       that may already have been found and fixed.</para>
 
     <para>Any version of this errata document actually distributed
       with the release (for example, on a CDROM distribution) will be
       out of date by definition, but other copies are kept updated on
       the Internet and should be consulted as the <quote>current
       errata</quote> for this release.  These other copies of the
       errata are located at <uri xlink:href="https://www.FreeBSD.org/releases/">https://www.FreeBSD.org/releases/</uri>, plus any sites
       which keep up-to-date mirrors of this location.</para>
 
     <para>Source and binary snapshots of &os; &release.branch; also
       contain up-to-date copies of this document (as of the time of
       the snapshot).</para>
 
     <para>For a list of all &os; CERT security advisories, see <uri xlink:href="https://www.FreeBSD.org/security/">https://www.FreeBSD.org/security/</uri>.</para>
 
   </sect1>
 
   <sect1 xml:id="security">
     <title>Security Advisories</title>
 
     <para>Problems described in the following security advisories have
       been fixed in &release.current;. For more information, consult
       the individual advisories available from
       <uri xlink:href="http://security.FreeBSD.org/">http://security.FreeBSD.org/</uri>.</para>
 
     &security;
   </sect1>
 
   <sect1 xml:id="errata">
     <title>Errata Notices</title>
 
     &errata;
   </sect1>
 
   <sect1 xml:id="late-news">
     <title>Late-Breaking News</title>
 
     <para>No late-breaking news.</para>
   </sect1>
 </article>
Index: stable/9/release/doc/share/xml/errata.xml
===================================================================
--- stable/9/release/doc/share/xml/errata.xml	(revision 293911)
+++ stable/9/release/doc/share/xml/errata.xml	(revision 293912)
@@ -1,137 +1,152 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!--
      The FreeBSD Documentation Project
 
      $FreeBSD$
 -->
 <informaltable frame="none" pgwide="1">
   <tgroup cols="3">
     <colspec colwidth="40%"/>
     <colspec colwidth="30%"/>
     <colspec colwidth="30%"/>
     <thead>
       <row>
 	<entry>Errata</entry>
 	<entry>Date</entry>
 	<entry>Topic</entry>
       </row>
     </thead>
 
     <tbody>
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-14:10.tzdata.asc">FreeBSD-EN-14:10.tzdata</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Time zone data file update</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-14:11.crypt.asc">FreeBSD-EN-14:11.crypt</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Change &man.crypt.3; default hashing algorithm
 	    back to DES</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-14:12.zfs.asc">FreeBSD-EN-14:12.zfs</link></entry>
 	<entry>11&nbsp;November&nbsp;2014</entry>
 	<entry><para>Fix NFSv4 and ZFS cache consistency
 	    issue</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-14:13.freebsd-update.asc">FreeBSD-EN-14:13.freebsd-update</link></entry>
 	<entry>23&nbsp;December&nbsp;2014</entry>
 	<entry><para>Fixed directory deletion issue in
 	    &man.freebsd-update.8;</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:01.vt.asc">FreeBSD-EN-15:01.vt</link></entry>
 	<entry>25&nbsp;February&nbsp;2015</entry>
 	<entry><para>&man.vt.4; crash with improper ioctl
 	    parameters</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:02.openssl.asc">FreeBSD-EN-15:02.openssl</link></entry>
 	<entry>25&nbsp;February&nbsp;2015</entry>
 	<entry><para>OpenSSL update</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:03.freebsd-update.asc">FreeBSD-EN-15:03.freebsd-update</link></entry>
 	<entry>25&nbsp;February&nbsp;2015</entry>
 	<entry><para>&man.freebsd-update.8; updates libraries in
 	    suboptimal order</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:04.freebsd-update.asc">FreeBSD-EN-15:04.freebsd-update</link></entry>
 	<entry>13&nbsp;May&nbsp;2015</entry>
 	<entry><para>&man.freebsd-update.8; does not ensure the
 	    previous upgrade has completed</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:06.file.asc">FreeBSD-EN-15:06.file</link></entry>
 	<entry>9&nbsp;June&nbsp;2015</entry>
 	<entry><para>Multiple denial of service issues</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:08.sendmail.asc">FreeBSD-EN-15:08.sendmail</link></entry>
 	<entry>30&nbsp;June&nbsp;2015 (revised)</entry>
 	<entry><para>Sendmail TLS/DH interoperability improvement</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:09.xlocale.asc">FreeBSD-EN-15:09.xlocale</link></entry>
 	<entry>30&nbsp;June&nbsp;2015</entry>
 	<entry><para>Fix inconsistency between locale and rune locale states</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:15.pkg.asc">FreeBSD-EN-15:15.pkg</link></entry>
 	<entry>25&nbsp;August&nbsp;2015</entry>
 	<entry><para>Insufficient check of supported &man.pkg.7;
 	  signature methods.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:18.pkg.asc">FreeBSD-EN-15:18.pkg</link></entry>
 	<entry>16&nbsp;September&nbsp;2015</entry>
 	<entry><para>Implement <literal>pubkey</literal> support for
 	    &man.pkg.7; bootstrap.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:19.kqueue.asc">FreeBSD-EN-15:19.kqueue</link></entry>
 	<entry>4&nbsp;November&nbsp;2015</entry>
 	<entry><para>&man.kqueue.2; write events never fire for files
 	    larger than 2GB.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-EN-15:20.vm.asc">FreeBSD-EN-15:20.vm</link></entry>
 	<entry>4&nbsp;November&nbsp;2015</entry>
 	<entry><para>Applications exiting due to segmentation
 	    violation on a correct memory address.</para></entry>
       </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-EN-16:02.pf.asc">FreeBSD-EN-16:02.pf</link></entry>
+	<entry>14&nbsp;January&nbsp;2016</entry>
+	<entry><para>Invalid TCP checksum issue.</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-EN-16:03.yplib.asc">FreeBSD-EN-16:03.yplib</link></entry>
+	<entry>14&nbsp;January&nbsp;2016</entry>
+	<entry><para><application>YP/NIS</application> library
+	    bug.</para></entry>
+      </row>
     </tbody>
   </tgroup>
 </informaltable>
Index: stable/9/release/doc/share/xml/security.xml
===================================================================
--- stable/9/release/doc/share/xml/security.xml	(revision 293911)
+++ stable/9/release/doc/share/xml/security.xml	(revision 293912)
@@ -1,257 +1,310 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
 <!--
      The FreeBSD Documentation Project
 
      $FreeBSD$
 -->
 <informaltable frame="none" pgwide="1">
   <tgroup cols="3">
     <colspec colwidth="40%"/>
     <colspec colwidth="30%"/>
     <colspec colwidth="30%"/>
     <thead>
       <row>
 	<entry>Advisory</entry>
 	<entry>Date</entry>
 	<entry>Topic</entry>
       </row>
     </thead>
 
     <tbody>
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:18.openssl.asc">FreeBSD-SA-14:18.openssl</link></entry>
 	<entry>9&nbsp;September&nbsp;2014</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:19.tcp.asc">FreeBSD-SA-14:19.tcp</link></entry>
 	<entry>16&nbsp;September&nbsp;2014</entry>
 	<entry><para>Denial of Service in TCP packet
 	    processing.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:20.rtsold.asc">FreeBSD-SA-14:20.rtsold</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Remote buffer overflow
 	    vulnerability.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:21.routed.asc">FreeBSD-SA-14:21.routed</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Remote denial of service
 	    vulnerability.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:22.namei.asc">FreeBSD-SA-14:22.namei</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Memory leak in sandboxed namei
 	    lookup.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:23.openssl.asc">FreeBSD-SA-14:23.openssl</link></entry>
 	<entry>21&nbsp;October&nbsp;2014</entry>
 	<entry><para>Multiple vulerabilities.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:25.setlogin.asc">FreeBSD-SA-14:25.setlogin</link></entry>
 	<entry>04&nbsp;November&nbsp;2014</entry>
 	<entry><para>Kernel stack disclosure.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:26.ftp.asc">FreeBSD-SA-14:26.ftp</link></entry>
 	<entry>04&nbsp;November&nbsp;2014</entry>
 	<entry><para>Remote code execution.</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:28.file.asc">FreeBSD-SA-14:28.file</link></entry>
 	<entry>10&nbsp;December&nbsp;2014</entry>
 	<entry><para>Multiple vulnerabilities in &man.file.1; and
 	    &man.libmagic.3;</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:29.bind.asc">FreeBSD-SA-14:29.bind</link></entry>
 	<entry>10&nbsp;December&nbsp;2014</entry>
 	<entry><para>Remote denial of service
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-14:31.ntp.asc">FreeBSD-SA-14:31.ntp</link></entry>
 	<entry>23&nbsp;December&nbsp;2014</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-15:01.openssl.asc">FreeBSD-SA-15:01.openssl</link></entry>
 	<entry>14&nbsp;January&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:02.kmem.asc">FreeBSD-SA-15:02.kmem</link></entry>
 	<entry>27&nbsp;January&nbsp;2015</entry>
 	<entry><para>SCTP kernel memory corruption and
 	    disclosure vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:03.sctp.asc">FreeBSD-SA-15:03.sctp</link></entry>
 	<entry>27&nbsp;January&nbsp;2015</entry>
 	<entry><para>SCTP stream reset
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:04.igmp.asc">FreeBSD-SA-15:04.igmp</link></entry>
 	<entry>25&nbsp;February&nbsp;2015</entry>
 	<entry><para>Integer overflow in IGMP protocol</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:05.bind.asc">FreeBSD-SA-15:05.igmp</link></entry>
 	<entry>25&nbsp;February&nbsp;2015</entry>
 	<entry><para>Remote denial of service
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:06.openssl.asc">FreeBSD-SA-15:06.openssl</link></entry>
 	<entry>19&nbsp;March&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:07.ntp.asc">FreeBSD-SA-15:07.ntp</link></entry>
 	<entry>7&nbsp;April&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:09.ipv6.asc">FreeBSD-SA-15:09.ipv6</link></entry>
 	<entry>7&nbsp;April&nbsp;2015</entry>
 	<entry><para>Router advertisement Denial of
 	    Service</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:10.openssl.asc">FreeBSD-SA-15:10.openssl</link></entry>
 	<entry>16&nbsp;June&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:11.bind.asc">FreeBSD-SA-15:11.bind</link></entry>
 	<entry>7&nbsp;July&nbsp;2015</entry>
 	<entry><para>Resolver remote denial of service</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:13.tcp.asc">FreeBSD-SA-15:13.tcp</link></entry>
 	<entry>21&nbsp;July&nbsp;2015</entry>
 	<entry><para>resource exhaustion due to sessions stuck in
 	    <literal>LAST_ACK</literal> state.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:15.tcp.asc">FreeBSD-SA-15:15.tcp</link></entry>
 	<entry>28&nbsp;July&nbsp;2015</entry>
 	<entry><para>resource exhaustion in <acronym>TCP</acronym>
 	    reassembly</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:16.openssh.asc">FreeBSD-SA-15:16.openssh</link></entry>
 	<entry>28&nbsp;July&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:17.bind.asc">FreeBSD-SA-15:17.bind</link></entry>
 	<entry>28&nbsp;July&nbsp;2015</entry>
 	<entry><para>Remote denial of service
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:19.routed.asc">FreeBSD-SA-15:19.routed</link></entry>
 	<entry>5&nbsp;August&nbsp;2015</entry>
 	<entry><para>Remote denial of service
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:20.expat.asc">FreeBSD-SA-15:20.expat</link></entry>
 	<entry>18&nbsp;August&nbsp;2015</entry>
 	<entry><para>Fix multiple integer overflows in
 	    &man.libbsdxml.3;.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:21.amd64.asc">FreeBSD-SA-15:21.amd64</link></entry>
 	<entry>25&nbsp;August&nbsp;2015</entry>
 	<entry><para>Fix local privilege escalation in IRET
 	    handler.</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:22.openssh.asc">FreeBSD-SA-15:22.openssh</link></entry>
 	<entry>25&nbsp;August&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link xlink:href="&security.url;/FreeBSD-SA-15:23.bind.asc">FreeBSD-SA-15:23.bind</link></entry>
 	<entry>2&nbsp;September&nbsp;2015</entry>
 	<entry><para>Remote denial of service
 	    vulnerability</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:24.rpcbind.asc">FreeBSD-SA-15:24.rpcbind</link></entry>
 	<entry>29&nbsp;September&nbsp;2015</entry>
 	<entry><para>Remote denial of service</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:25.ntp.asc">FreeBSD-SA-15:25.ntp</link></entry>
 	<entry>26&nbsp;October&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
 
       <row>
 	<entry><link
 	    xlink:href="&security.url;/FreeBSD-SA-15:26.openssl.asc">FreeBSD-SA-15:26.openssl</link></entry>
 	<entry>5&nbsp;December&nbsp;2015</entry>
 	<entry><para>Multiple vulnerabilities</para></entry>
       </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-15:27.bind.asc">FreeBSD-SA-15:27.bind</link></entry>
+	<entry>16&nbsp;December&nbsp;2015</entry>
+	<entry><para>Remote denial of service</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:01.sctp.asc">FreeBSD-SA-16:01.sctp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>ICMPv6 error message vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:02.ntp.asc">FreeBSD-SA-16:02.ntp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Panic threshold bypass
+	    vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:03.linux.asc">FreeBSD-SA-16:03.linux</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Incorrect <literal>futex</literal>
+	    handling</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:04.linux.asc">FreeBSD-SA-16:04.linux</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>&man.setgroups.2; system call
+	    vulnerability</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:05.tcp.asc">FreeBSD-SA-16:05.tcp</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>MD5 signature denial of service</para></entry>
+      </row>
+
+      <row>
+	<entry><link
+	    xlink:href="&security.url;/FreeBSD-SA-16:06.bsnmpd.asc">FreeBSD-SA-16:06.bsnmpd</link></entry>
+	<entry>15&nbsp;January&nbsp;2016</entry>
+	<entry><para>Insecure default configuration file
+	  permissions</para></entry>
+      </row>
     </tbody>
   </tgroup>
 </informaltable>