MFS10 r273294 (r273178 in HEAD):

  Update vt(4) for UEFI defaults and special keys

  vt(4) is the default console for UEFI boot [1], and the bitmapped
  kern.vt.spclkeys sysctl has been replaced with individual kern.vt.kbd_*
  enable sysctls.

PR:		193710
Approved by:	re
MFS10 r273296 (r273219 in HEAD):

  Do nothing in vt_upgrade if there is no vt driver

  Previously, if no drivers attached at boot we would panic with
  "vtbuf_fill_locked begin.tp_row 0 must be < screen height 0".

PR:		192248
Approved by:	re
MFC10 r273275 (r273168 in head):
Fix the reported streams in a SCTP_STREAM_RESET_EVENT, if a
sent incoming stream reset request was responded with failed
or denied.
Thanks to Peter Bostroem from Google for reporting the issue.

Approved by: re (hrs)
Sponsored 2y:
MFS10 r273272 (r273143 in head):
Remove setting BIO_DONE flag for BIOs that have done() method.

This fixes use-after-free, caused by geom_disk, completing same BIO twice
to save extra allocation, and getting BIO_DONE set after the first.

Approved by:	re (hrs)
MFstable10 r273354:
  MFC r273204:
  Add more descriptive metadata to the ISO images.

MFstable10 r273355:
  Fix label for the UEFI bootonly cd.

PR:		165876
Approved by:	re (hrs)
Sponsored by:	The FreeBSD Foundation
Add basic UEFI boot procedure manpage

MFS10 of r273385 (r273218,r273235 in HEAD)

Approved by:	re (gjb)
MFS r273149 (jkim): MFC: r273144, r273146

Merge OpenSSL 1.0.1j.

This is part of an upcoming FreeBSD security advisory.

Approved by:	re (so@ blanket)
Fix rtsold(8) remote buffer overflow vulnerability. [SA-14:20]

Fix routed(8) remote denial of service vulnerability. [SA-14:21]

Fix memory leak in sandboxed namei lookup. [SA-14:22]

Approved by:	re (so@ blanket)
Document the following security advisories:
 FreeBSD-SA-14:20.rtsold
 FreeBSD-SA-14:21.routed
 FreeBSD-SA-14:22.namei
 FreeBSD-SA-14:23.openssl

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFstable10 r273429:
  MFC r273402:
  Fix an issue where a FreeBSD virtual machine provisioned in
  the Microsoft Azure service does not recognize the second
  attached disk on the system.

PR:		194376
Approved by:	re (delphij)
Sponsored by:	The FreeBSD Foundation
Update releng/10.1 to -RC3 as part of the 10.1-RELEASE cycle.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFS r273580: MFC r273577:

Return BUS_PROBE_DEFAULT instead of BUS_PROBE_VENDOR or 0 for in-tree
driver.  This change was verified by Microsoft.

Approved by:	re (kib)
Document r273399, OpenSSL updated to version 1.0.1j.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
Note to avoid using GENERIC kernel on i386 when using
multi-disk ZFS pools, referencing an old UPDATING entry
that predates 10.0-RELEASE.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation
MFstable10 r273698:
MFC r273653:
  Fix a few issues with creating VOLUME_LABEL for the
  installation ISOs:

   - TYPE, BRANCH, and REVISION are only defined if
     OSRELEASE is not defined, so in situations where
     one might set OSRELEASE for an in-house ISO build,
     VOLUME_LABEL would be empty.

   - makefs(8) limits the volume label to 32 characters,
     which for the powerpc64 case, OSRELEASE expands to
     FreeBSD-11.0-CURRENT-powerpc-powerpc64.  Even with
     removing the prefixing 'FreeBSD-', the string is 30
     characters long, leaving zero room for suffixing the
     type of ISO media (BO for bootonly, CD for cdrom, and
     DVD for dvdrom).

  Resolve these by defining VOLUME_LABEL when defining
  OSRELEASE if unset.  If OSRELEASE is defined by the
  builder, use the OSRELEASE from that definition as the
  VOLUME_LABEL.

  In addition, for cases where both TARGET and TARGET_ARCH
  are used for the VOLUME_LABEL, use TARGET_ARCH if it
  differs from TARGET.

  There are probably a few sharp edges here yet, but these
  problems are going to affect the powerpc/powerpc64 builds
  for 10.1-RELEASE, so the immediate concern is fixing the
  underlying problem at hand quickly, and less so about the
  elegance of the fix.

Approved by:	re (kib)
Sponsored by:	The FreeBSD Foundation