Fix a bug that allowed a tracing process (e.g. gdb) to write
to a memory-mapped file in the traced process's address space
even if neither the traced process nor the tracing process had
write access to that file.

Security:	CVE-2013-2171
Security:	FreeBSD-SA-13:06.mmap
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@251903 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Fix Denial of Service vulnerability in named(8). [13:07]

Fix a bug that allows remote client bypass the normal
access checks when when -network or -host restrictions
are used at the same time with -mapall. [13:08]

Security:	CVE-2013-4854
Security:	FreeBSD-SA-13:07.bind
Security:	CVE-2013-4851
Security:	FreeBSD-SA-13:08.nfsserver
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@253693 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Fix an integer overflow in computing the size of a temporary buffer
can result in a buffer which is too small for the requested
operation. [13:09]

Fix a bug that could lead to kernel memory disclosure with
SCTP state cookie. [13:10]

Fix a data corruption problem with mfi(4) operating on > 2TB
disks in a JBOD. [EN-13:03]

Security:	CVE-2013-3077
Security:	FreeBSD-SA-13:09.ip_multicast
Security:	CVE-2013-5209
Security:	FreeBSD-SA-13:10.sctp
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@254631 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security:	CVE-2013-5691
Security:	FreeBSD-SA-13:12.ifioctl
Security:	CVE-2013-5710
Security:	FreeBSD-SA-13:13.nullfs
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@255448 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r256646, r256767, r257038:
  When installing updates, install new directories first and remove old
  directories last.

  Allow ~ in file names so libtool droppings in contrib don't break updates.
  It has happened twice now, and is likely to happen again.

  Be more selective when filtering for lib*.so.N files.  These are deleted
  at the end of the upgrade process, after warning users to upgrade any
  3rd party software (e.g., from the ports tree) which might link to the
  libraries being removed.

Errata Notice:  FreeBSD-EN-13:04.freebsd-update
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@257194 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r257879:

Fix typo in r256646: We want to generate lists of directories in
INDEX-OLD and INDEX-NEW and compare them, not generate the same
list of directories from INDEX-OLD twice...

Pointy hats to: cperciva & everybody who didn't proofread
		EN-13:04 enough
Errata Notice:	FreeBSD-EN-13:05.freebsd-update
Approved by:	so


git-svn-id: svn+ssh://svn.freebsd.org/base/releng/9.1@258725 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f