HardenedBSD-10-STABLE-v32.2

• fixed broken motd update mechanism

HardenedBSD-11-CURRENT-v33

• https://security.freebsd.org/advisories/FreeBSD-SA-15:24.rpcbind.asc
• bumped stack-protector settings -fstack-protector -> -fstack-protector-strong

HardenedBSD-10-STABLE-v32.1

• https://security.freebsd.org/advisories/FreeBSD-SA-15:24.rpcbind.asc

HardenedBSD-10-STABLE-v32

• minor changes:
  • restyled boot menu
  • branded bsdinstaller
  • fixed network install
  • updated aslr man page
• major changes:

[20150915] ASLR changes
__HardenedBSD_version = 32

   Changed default VDSO randomization from 20 bits to 28 bits.
   Fixed div by zero in rare cases in pax_aslr_init_vmspace.

[20150907] Reworked DISALLOWMAP32BIT and changes some internal functions
__HardenedBSD_version = 31

   Rename and correctly paxify the DISALLOWMAP32BIT.
   Changed pax flags setup.

[20150905] Added MAP32_PROTECT
__HardenedBSD_version = 30

   Added per-process mode to disable MAP_32BIT mode mmap(2).

HardenedBSD-11-CURRENT-v32.1

HBSD: rebrand the installer, boot menu and motd
HBSD: basic support for netinstall, currently only for the HardenedBSD-stable repo's branches
FBSD: import unbound 1.5.4
FBSD: Update jemalloc to 4.0.2.
FBSD: Kernel part of reroot support - a way to change rootfs without reboot.
HBSD: fix build on 32bit architectures, where MAP_32BIT isn't supported
FBSD: Add Intel Skylake/I219 Support

HardenedBSD-11-CURRENT-v32

[20150915] ASLR changes
__HardenedBSD_version = 32

    Changed default VDSO randomization from 20 bits to 28 bits.
    Fixed div by zero in rare cases in pax_aslr_init_vmspace.

[20150907] Reworked DISALLOWMAP32BIT and changes some internal functions
__HardenedBSD_version = 31

    Rename and correctly paxify the DISALLOWMAP32BIT.
    Changed pax flags setup.

[20150905] Added MAP32_PROTECT
__HardenedBSD_version = 30

    Added per-process mode to disable MAP_32BIT mode mmap(2).

HardenedBSD-10-STABLE-v29.2

• https://security.freebsd.org/advisories/FreeBSD-EN-15:18.pkg.asc
• https://security.freebsd.org/advisories/FreeBSD-EN-15:17.libc.asc
• https://security.freebsd.org/advisories/FreeBSD-EN-15:16.pw.asc

HardenedBSD-11-CURRENT-v29.1

• https://security.freebsd.org/advisories/FreeBSD-SA-15:22.openssh.asc
• https://security.freebsd.org/advisories/FreeBSD-SA-15:21.amd64.asc (not affected this branch)
• https://security.freebsd.org/advisories/FreeBSD-EN-15:15.pkg.asc
• https://security.freebsd.org/advisories/FreeBSD-EN-15:14.ixgbe.asc

HardenedBSD-10-STABLE-v29.1

• https://security.freebsd.org/advisories/FreeBSD-SA-15:22.openssh.asc
• https://security.freebsd.org/advisories/FreeBSD-SA-15:21.amd64.asc (not affected this branch)
• https://security.freebsd.org/advisories/FreeBSD-EN-15:15.pkg.asc
• https://security.freebsd.org/advisories/FreeBSD-EN-15:14.ixgbe.asc

HardenedBSD-11-CURRENT-v29

• fixed random related hangup with installers under virtual machines
• fixed pkg repo issues