Document SA-12:01 to :08 and SA-13:02 to :05.

Approved by:	re (implicitly)
Trim copyright year.

Approved by:	re (implicitly)
Update relnotes item:
        kernel thread CPU affinity configuration bug fixed,
        run(4) Logitec LAN-W300NU2 support,
        IPv6 multi-FIB support,
        SO_PROTOCOL/SO_PROTOTYPE sockopt added,
        isci(4) more Intel C600 chip ids added,
        mpt(4) and mfi(4) attach conflict issue fixed,
        nullfs(5) panic fixed,
        rc.d scripts' ^T output goes to stderr, and
        tcsh updated to 6.18.01.

Approved by:	re (implicitly)
Update relnotes item:
	vnet context bug fixed,
	dirty pages flushing issue fixed,
	pathname-only boot.config(5) problem fixed,
	UFS1 handling in boot loader on big endian platforms fixed,
	gptboot altlba handling changed,
	zfsboot -q option issue fixed,
	workaround for AMD CPU 10h/12h erratum 721 added,
	atkbdc(4) PNP0320 support added,
	cpufreq(4) frequency tuning calculation fixed,
	hwpmc(4) deadlock fixed,
	pci(4) HT-MSI mapping support,
	uart(4) serial over LAN on Intel 4 serries chipset support,
	usb(4) suspend handling improved,
	ale(4) link state handling improved, flow control support,
	bge(4) watchdog timeout issue fixed, if_ierrors handling fixed,
	cas(4),gem(4),hme(4) have been added to GENERIC for amd64/i386,
	fxp(4) extra media change issue fixed,
	iwn(4) Intel Centrino 6150 support,
	re(4)/rl(4) RTL8139 support improved,
	re(4) intermittent link up/down issue on RTL8169 fixed,
	rl(4) WoL support is disabled by default,
	run(4) firmware initinalization changed,
	run(4) updated to 0.236,
	sf(4) system load issue fixed,
	u3g(4) new Qualcomm modems added as supported devices,
	if_bridge(4) the number of forwarding cache entries bumped,
	ipfw(4) table arg improved,
	ipfw(4) net.inet.ip.fw.tables_max added,
	vlan(4) EUI64 part of an IPv6 address fixed,
	a panic in multicast routing on vimage kernel fixed,
	a panic in ng_patch(4) fixed,
	SCTP stack now supports ng_iface(4) and stf(4),
	SCTP stack now supports net.inet.udp.checksum sysctl for encap,
	new sysctl kern.features.ata_cam added,
	cam(4) now tries READ CAPACITY(16),
	isci(4) READ CAPACITY(16) bug fixed,
	PART_LDM geom class added,
	tmpfs(5) is not experimental anymore,
	xen(4) blkfront driver attach issue fixed,
	NFS stale name cache issue fixed,
	NFS nametimeo parameter added,
	daemon(8) -r,
	devfs(5) ruleset=number mount option and -u support added,
	libpmc more PMCs support,
	libradius rad_bind_to(3) added,
	libutil priority class capability bug fixed,
	pam_unix(8) passwordtime capability support,
	procstat(1) osreldate support,
	remquo(3) bug fixed,
	rtld(1) performance improved,
	sh(1) arithmetic expansion improved,
	unzip(1) -Z
	zfs list -t snapshot improved in performance,
	zfs get -t datatype added,
	ISC BIND 9.6-ESV-R6,
	tz2012a, and
	pkg_create(1) -p option improved.

Approved by:	re (implicitly)
Update relnotes item:
	debug.kdb.breack_to_debugger, debug.kdb.alt_break_to_debugger added,
	kern.stop_scheduler_on_panic added,
	usb(4) multi-TT hub support,
	wbwd(4) added,
	bce(4) jumbo frame fixed,
	bce(4) remote PHYs support,
	iwn(4) Intel Centrino Wireless-N 100/130 support,
	igb(4) CPU binding on an SMP machine changed,
	ixgbe(4) TSO issue fixed,
	u3g(4) SIM5218 support,
	FIB handling improved: locking removal, net.fibs tunable,
	TCP host cache issue fixed,
	ATA_CAM compat shims added,
	da(4) subsequent BIO_DELETE request gathering,
	da(4) new device support,
	mfi(4) LSI MegaRAID SAS ThuderBolt support,
	GEOM_MULTIPATH improvements,
	GEOM_RAID DDF metadata support,
	NFS: a workaround for a non-FreeBSD server implemented,
	vfs.zfs.txg.timeout is now writable,
	dot.cshrc changed,
	fetch(1) percent-encoded user and password support,
	PROFIL_USE_PID variable for gprof profiling data generation,
	lastcomm(1) +format option added,
	libusb_get_max_iso_packet_size(3) added,
	pam_exec(8) return_prog_exit_status option added,
	setbuf(1) and libstdbuf library added,
	traceroute(8) bugfix,
	usbdump(8) filtering support, and
	usbhidctl(1) -z flag.

Approved by:	re (implicitly)
Update relnotes item:
	shm_map(9) and shm_unmap(9) added,
	sparc64 loader heap command,
	sparc64 zfsboot and zfsloader,
	amd64 extended FPU states and AVX,
	pcf8563(4) added,
	puc(4) Sun 1040 PCI Quad Serial support,
	snd_hda(4) updated,
	bce(4) IPMI fix,
	bge(4) bugfix,
	mxge(4) updated to 1.4.55,
	ral(4) RT2800/3000 support,
	if_bridge(4) duplicate ID issue fixed, linkstate and carp(4) support,
	net.link.bridge.* as loader tunables,
	IPv6 refcount fixes,
	if_lagg(4) lagghash option added,
	amr(4) bugfix,
	kern.cam.pmp.hide_special sysctl added,
	isci(4) bugfix,
	NFS over ZFS memory leak fixed,
	inetd(8) time handling fixed,
	procstat(1) and fstat(1) pathname for shared memory object support,
	ps(1) cow keyword added,
	zfs(8) send displays transmitted data size, and
	ISC BIND updated to 9.6-ESV-R7-P1.

Approved by:	re (implicitly)
Update relnotes item:
	zfsboot and zfsloader filesystem support in zpool,
	acpi(4) Processor object listing now uses MADT,
	uftdi(4) BeagleBone and egnite Turtelizer support,
	tap(4) VIMAGE support,
	ahci(4) Marvell 88SE9220/9230/9235 support,
	mps(4) updated to 14.00.00.01-fbsd,
	kdump(1) -p option,
	libedit updated to snapshot as of 2009/12/28,
	pciconf(8) -e option,
	sockstat(1) -j option,
	zfs(8) canmount property handling,
	netcat updated to OpenBSD 5.1, and
	OpenSSL updated to version 0.9.8x.

Approved by:	re (implicitly)
Update relnotes item:
	puc(4) Moxa PCIe multiport serial boards support,
	snd_emu10kx(4) on PAE kernel fixed,
	IPv6 atomic fragment handling,
	if_lagg(4) interface renaming issue fixed,
	ng_netflow(4) NetFlow version 9 support,
	mps(4) in GENERIC on sparc64 and powerpc, and
	procstat(1) superpage flag support.

Approved by:	re (implicitly)
Update relnotes item:
	F_DUP{,2}FD_CLOEXEC implemented for fcntl(2),
	filemon(4) added,
	kern.*siz writable sysctl,
	random(4) PADLOCK_RNG and RDRAND_RND,
	Danish keymap for MacBook added,
	uchcom(4) CH341/CH340 USB-Serial Bridge support,
	ukbd(4) Microsoft Natural Egronomic Keyboard 4000 issue fixed,
	uplcom(4) Motorola cable support,
	uslcom(4) CP2103/CP2104/CP2105 support,
	virtio drivers added,
	em(4), lem(4), igb(4) stat counter bugfix,
	ipheth(4) iPhone 5 support,
	arcmsr(4) updated to 1.20.00.25,
	hptiop(4) updated to 1.8,
	isci(4) SCSI UNMAP to ATA DSM translation,
	GEOM_RAID kern.geom.raid.* tunables,
	tws(4) updated to 10.80.00.005,
	NFS security configuration issue in exports(5) fixed,
	crontab(1) one second wait added,
	fetch(1) max number of HTTP redirections increased,
	fetch(1) 305 and 308 status code supported,
	make(1) :tu and :tl modifiers added,
	mv(1) -h added,
	ppp(8) lqr/echo issue fixed,
	ps(1) dsiz and ssiz keywords added,
	NO_FOO overrides WITH_FOO in src.conf,
	syslogd(8) IPv6 support in dest addr,
	top(1) ZFS ARC stats support,
	rc.d/jail jail_parameters variable added,
	ISC BIND 9.6-ESV-R7-P4,
	LESS v451,
	pkg(8) command added, and
	pkg_add(1) PACKAGESUFFIX support added.

Approved by:	re (implicitly)
Update relnotes item:
	comconsole_port and _pcidev loader variable,
	hw.broken_txfifo tunable,
	ule(4) SMT logical CPU selection improved,
	atkbdc(4) Synaptics touchpad v7.5,
	puc(4) more devices,
	syscons(4) mouse detach handling fixed,
	uart(4) more devices,
	virtio(4) in GENERIC,
	xhci(4) port routing, more devices,
	snd_uaudio(4) USB Audio v2.0, more devices,
	age(4) jumbo frame bugfix,
	bge(4) more devices,
	cxgbe(4) 1.8.4,
	em(4) 7.3.7 and lem(4) 2.3.9,
	ixgbe(4) 1.1.4,
	oce(4) 4.6.95.0,
	rl(4) more devices,
	u3g(4) more devices,
	bpf(4) performance improvement,
	IP_RECVTOS sockopt,
	net.inet.tcp.rexmit_drop_options added,
	arcmsr(4) 1.20.00.26,
	ata(4) more devices,
	ata(4) SATA revision tunables,
	kern.cam.da.da_send_ordered rename,
	hpt27xx(4) in GENERIC,
	mfi(4) hw.mfi.allow_cam_disk_passthrough,
	GEOM_RAID Intel RRT,
	GEOM_RAID BIO_DELETE support,
	linprocfs(5) /proc/filesystems,
	msdosfs(5) bugfix,
	ZFS SPA v5000,
	ZFS import bugfix,
	atrun(8) loadavg fix,
	chkgrp(8) -q flag,
	cut(1) -w flag,
	devd(8) ! operator,
	du(1) -g flag,
	workaround for CVE-2010-2632,
	ifconfig state for carp(4),
	inetd(8) listen queue fix,
	ip6addrctl(8) policy updated to RFC 6724,
	rarpd(8) -P flag,
	systat(1) fractional number support,
	tcpdrop(8) colon-separated list support,
	zfs(8) jail/unjail name/id support,
	service(8) -R flag,
	AWK 20121220,
	ISC BIND 9.8.4-P2,
	BZIP2 1.0.6,
	libexpat 2.1.0,
	netcat 5.2,
	OpenSSH 6.1,
	OpenSSL 0.9.8y,
	sendmail 8.14.7,
	tzdata2012j, and
	XZ 5.0.4.

Approved by:	re (implicitly)
Update description of logical CPU handling in the latest releases and
remove obsolete sysctl variable machdep.hlt_logical_cpus.

Pointed out by:	mav
Approved by:	re (implicitly)
- Remove an empty section.
- Add version number of x11/kde4.

Approved by:	re (implicitly)
Fix a problem where dhclient(8) utility tries to initilaize an
fxp(4) forever because the driver resets the controller chip
twice upon initialization. [EN-13:01]

Fix a problem where frames sent to additional MAC addresses are
not forwarded to the vtnet(4) interface. [EN-13:02]

Approved by:	so (delphij)
Fix Denial of Service vulnerability in named(8). [13:07]

Security:	CVE-2013-4854
Security:	FreeBSD-SA-13:07.bind
Approved by:	so
Fix an integer overflow in computing the size of a temporary buffer
can result in a buffer which is too small for the requested
operation. [13:09]

Fix a bug that could lead to kernel memory disclosure with
SCTP state cookie. [13:10]

Security:	CVE-2013-3077
Security:	FreeBSD-SA-13:09.ip_multicast
Security:	CVE-2013-5209
Security:	FreeBSD-SA-13:10.sctp
Approved by:	so