MFS r260638 (MFC r260636):

Fix bsnmpd remote denial of service vulnerability.

Reported by:	dinoex
Submitted by:	harti
Security:	FreeBSD-SA-14:01.bsnmpd
Security:	CVE-2014-1452
Approved by:	re (gjb)
MFS r260639 (MFC r260637):

Disable 'monitor' feature in ntpd by default.

Security:	FreeBSD-SA-14:02.ntpd
Approved by:	re (gjb)
Document recent security advisories (since 9.2-RELEASE is released).

Approved by:	re (gjb)
- MFC 260656:

* Purge old translations.
* Add missing footer due to DSSSL->XSLT migration and use XML catalog to
  resolve URI.
* Add missing arch= and revision= support.
* Update release.ent and fix release number in Errata.

- Trim copyright year.
- Trim merged= attr.  It is useless for release branch.
- Move entities into release.ent.
- Update footer for a release.
- Document rc.d/sendmail certification support[1].
- Update BIND removal entry to mention NLnet Labs[2].

Submitted by:	jmg[1]
Suggested by:	erwin[2]
Approved by:	re (implicitly)
Update releng/10.0 to -RELEASE as part of the 10.0-RELEASE cycle.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFreleng10 r259582 (reverse), MFstable10 r259491, r259492, r260781:

r259582 (reverted):
  Set PACKAGESITE to 'release/0' for the pkg-stage target to pull
  the release set of packages.  (Required to eliminate conflicts.)

r259491:
  Prevent release build errors found during snapshot builds where if
  NOPORTS=1, pkg-stage.sh cannot build the ports-mgmt/pkg port if
  WITH_DVD=1.

r259492:
  Add NOPKG to disable pkg-stage.

r260781:
  Update the pkg-stage target to be more compatible with pkg-1.2:

 - Add a release-dvd.conf pkg(8) configuration file to override
   the default FreeBSD.conf configuration.
 - Remove architecture-specific pkg-stage.conf files, consolidate,
   and move their contents to scripts/pkg-stage.sh.
 - Use 'pkg -vv' to determine the ABI, which is used as the
   cache directory.

  Prior to these changes, it would be possible for pkg-stage to fetch
  conflicting binary packages from multiple repositories.

  A change local to releng/10.0 sets the package fetch URL to
  'release/0'.

Approved by:	re (delphij)
Sponsored by:	The FreeBSD Foundation
Merge branch 'releng/10.0' of https://github.com/freebsd/freebsd into releng/10.0

Tag -p5 as our 10.0-RELEASE

Conflicts:
	sys/conf/newvers.sh