git: 53c5c1935320 - releng/14.4 - Add UPDATING entries and bump version

From: Mark Johnston <markj_at_FreeBSD.org>
Date: Tue, 25 Aug 2026 16:00:32 UTC
The branch releng/14.4 has been updated by markj:

URL: https://cgit.FreeBSD.org/src/commit/?id=53c5c1935320108ba0e597528ad577862a297c0e

commit 53c5c1935320108ba0e597528ad577862a297c0e
Author:     Mark Johnston <markj@FreeBSD.org>
AuthorDate: 2026-08-19 19:03:35 +0000
Commit:     Mark Johnston <markj@FreeBSD.org>
CommitDate: 2026-08-24 19:00:32 +0000

    Add UPDATING entries and bump version
    
    Approved by:    so
---
 UPDATING            | 26 ++++++++++++++++++++++++++
 sys/conf/newvers.sh |  2 +-
 2 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/UPDATING b/UPDATING
index 9c4e262b56a2..7f47d972a9f4 100644
--- a/UPDATING
+++ b/UPDATING
@@ -12,6 +12,32 @@ Items affecting the ports and packages system can be found in
 /usr/ports/UPDATING.  Please read that file before updating system packages
 and/or ports.
 
+20260825:
+	14.4-RELEASE-p9	EN-26:20.microcode
+			EN-26:21.openssl
+			SA-26:56.hwpmc
+			SA-26:58.sound
+			SA-26:60.ppp
+			SA-26:61.openssl
+			SA-26:62.tty
+			SA-26:63.posixshm
+
+	Intel CPU microcode not applied during early loading for some CPUs. [EN-26:20.microcode]
+
+	OpenSSL pkg-config files contain incorrect versions. [EN-26:21.openssl]
+
+	hwpmc fails to detach PMCs during exec credential transitions. [SA-26:56.hwpmc]
+
+	Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl. [SA-26:58.sound]
+
+	Multiple vulnerabilities in ppp. [SA-26:60.ppp]
+
+	Multiple vulnerabilities in OpenSSL. [SA-26:61.openssl]
+
+	Kernel use-after-free via tty ioctls. [SA-26:62.tty]
+
+	TOCTOU in POSIX shared memory large page configuration. [SA-26:63.posixshm]
+
 20260729:
 	14.4-RELEASE-p8	EN-26:18.tzdata
 			SA-26:52.if_wg
diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh
index e5ee2acfb4c7..a783e01ed3ed 100644
--- a/sys/conf/newvers.sh
+++ b/sys/conf/newvers.sh
@@ -53,7 +53,7 @@
 
 TYPE="FreeBSD"
 REVISION="14.4"
-BRANCH="RELEASE-p8"
+BRANCH="RELEASE-p9"
 if [ -n "${BRANCH_OVERRIDE}" ]; then
 	BRANCH=${BRANCH_OVERRIDE}
 fi