diff --git a/UPDATING b/UPDATING
index e12d21e253ca39..ecde75536cbc6c 100644
--- a/UPDATING
+++ b/UPDATING
@@ -17,6 +17,14 @@ from older versions of FreeBSD, try WITHOUT_CLANG and WITH_GCC to bootstrap to
 the tip of head, and then rebuild without this option. The bootstrap process
 from older version of current across the gcc/clang cutover is a bit fragile.
 
+20230906:
+	12.4-RELEASE-p5 FreeBSD-SA-23:10.pf
+			FreeBSD-SA-23:11.wifi
+
+	pf incorrectly handles multiple IPv6 fragment headers [SA-23:10.pf]
+
+	Wi-Fi encryption bypass [SA-23:11.wifi]
+
 20230801:
 	12.4-RELEASE-p4 FreeBSD-SA-23:06.ipv6
 			FreeBSD-SA-23:08.ssh
diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh
index cd51b45135d3c1..bb919a38da7d5f 100644
--- a/sys/conf/newvers.sh
+++ b/sys/conf/newvers.sh
@@ -49,7 +49,7 @@
 
 TYPE="FreeBSD"
 REVISION="12.4"
-BRANCH="RELEASE-p4"
+BRANCH="RELEASE-p5"
 if [ -n "${BRANCH_OVERRIDE}" ]; then
 	BRANCH=${BRANCH_OVERRIDE}
 fi