HardenedBSD-10-STABLE-v40 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
-------------------------------------
[freebsd] Implement AT_SECURE properly. FreeBSD-SA-16:10.linux (HardenedBSD not affected by default install)
[freebsd] ntpd update FreeBSD-SA-16:09.ntp (already fixed in 10-STABLE v39.2)
[hardenedbsd] HBSD: Default jemalloc's lg_chunk to 16 from 21.
[freebsd] continued UEFI loader rewrite
[freebsd] Remove the HPN and None cipher patches. (ssh)
[hardenedbsd] HBSD: bump __HardenedBSD_version to 40 after HBSD API changes
[hardenedbsd] HBSD: add public API to query the running kernel's __HardenedBSD_version
[hardenedbsd] HBSD: major flags related type cleanup
[hardenedbsd] HBSD: fix integer overflow in iconv kernel module

HardenedBSD-11-CURRENT-v40 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
----------------------------------------
[freebsd] linuxulator Implement AT_SECURE properly. FreeBSD-SA-16:10.linux (in the default HARDENEDBSD kernel config this is disabled)
[hardenedbsd] HBSD: Harden KLD-related syscalls
[hardenedbsd] HBSD: Default jemalloc's lg_chunk to 16 from 21.
[hardenedbsd] HBSD: fix integer overflow in iconv kernel module
[hardenedbsd] HBSD: bump __HardenedBSD_version to 40 after HBSD API changes
[hardenedbsd] HBSD: add public API to query the running kernel's __HardenedBSD_version
[hardenedbsd] HBSD: major flags related type cleanup
[freebsd] MFV r294491: ntp 4.2.8p6. FreeBSD-SA-16:09.ntp
[freebsd] Upgrade to OpenSSH 7.1p2.
[freebsd] loader - Fix EFI UFS caching
[hardenedbsd] HBSD: change the default stack protection in amd64 case
[hardenedbsd] HBSD: Fix etcupdate integration
[freebsd] Connect the ZFS boot environment menu to the UEFI loader
[freebsd] Add EFI ZFS boot support