Pull up following revision(s) (requested by taca in ticket #1912):
	etc/namedb/root.cache		patch
	doc/3RDPARTY			patch

Sync root.cache with the latest -current (rev. 1.18).
Pull up following revision(s) (requested by maxv in ticket #1921):
	sys/miscfs/umapfs/umap_vfsops.c: revision 1.94
1) 'error' is returned while it does not even hold an error code. Which
   means that zero is returned, and the kernel keeps mounting (and it
   probably ends up in a deadlock/memory corruption somewhere).
2) 'nentries' and 'gnentries' are int and user-controlled, and there's no
   check to ensure they are greater than zero. Since they are used to
   compute the size of two copyin's, a user can control the copied size
   by giving a negative value (like 128-2^29), and thus overwrite kernel
   memory.
Both triggerable from root only.
Pull up following revision(s) (requested by riastradh in ticket #1922):
	sys/dev/pci/pci_usrreq.c	1.26 via patch

Fix to make pci(4) reject unaligned configuration register reads and writes
before feeding them to a kassert in pci_conf_read/write or to a trap in the
hardware itself.
Ticket 1912, 1921 and 1922.
s/a/an/
Pull up following revision(s) (requested by spz in ticket #1918):
	crypto/dist/openssl/crypto/asn1/a_object.c	patch
	crypto/dist/openssl/crypto/asn1/asn1.h		patch
	crypto/dist/openssl/crypto/asn1/asn1_err.c	patch
	crypto/dist/openssl/crypto/objects/obj_dat.c	patch
	crypto/dist/openssl/ssl/d1_both.c		patch
	crypto/dist/openssl/ssl/s23_srvr.c		patch
	crypto/dist/openssl/ssl/s3_clnt.c		patch
	crypto/dist/openssl/ssl/t1_lib.c		patch

Patches for the following vulnerabilities:
Information leak in pretty printing functions (CVE-2014-3508)
Double Free when processing DTLS packets (CVE-2014-3505)
DTLS memory exhaustion (CVE-2014-3506)
DTLS memory leak from zero-length fragments (CVE-2014-3507)
OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510)
Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509)
OpenSSL TLS protocol downgrade attack (CVE-2014-3511)

backported from the recent 1.0.1i OpenSSL release.
Ticket 1918.
Ticket 1920.
Pull up following revision(s) (requested by maxv in ticket #1920):
	sys/netinet6/ip6_output.c			1.158 via patch

Fix a memory leak in calling setsockopt() on an INET6 socket.