HardenedBSD-10-STABLE-v46.12 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Warning: This is a SECURITY UPDATE!

Highlights:

• disabled SSH1 support from pam_ssh (868c4ae)
• enabled Ed25519 support in pam_ssh (e083321)
• libarchive update (19d12fa) [FreeBSD SA candidate]
• OpenSSL update (4e88981) [FreeBSD SA: https://www.freebsd.org/security/advisories/FreeBSD-SA-16:26.openssl.asc]
• lot of UFS updates

Installers:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-bootonly.iso) = ad66abde022d64e135c982453b285e2732ded77a87ade9cb24d46ec82385d8d5230094b47eff160a3190023732d0aec8ac960c7d1ec9dbe84c54b0d0d38ec009
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-disc1.iso) = a39b04e17144642b44b0e1b6adc8a174aa568aaf1fdeb775d7d172826d0933c68d54640032625e4ceec2d50085eb72bcadac05f710dc711adbf93f9f84a9224c
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-memstick.img) = f0dac00ed97c80b14940813563977582efa6a26db77102830e78d8100f9a0f7691a9e13fad06700dd46c6cbf72a56a5209687caf65a87c39f2a7ecfc8ba2590f
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-mini-memstick.img) = b1a75e65018f260232445ed1880f0e573e6527e0be6bced64003938cc7d95753f409f5770e71cb3be67a5de19ae1c96f775f39a3945087d9fc5adbc07f75f694
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-uefi-bootonly.iso) = c0763d816b49e7265704370151ae4e42b44b9fc4b9534ce3ab14e0691c7e4d111a2b7c3e39a144b24318e77b4f6280291d92a9174f3ba872f1fb1c46c48198c4
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-uefi-disc1.iso) = 08574fd958d58c5f349554a05559c79778f59f916a9877b40a4a52a7bb8869fe749b2cc776eb2958a4e327b5d9617ebd9cad13b2b5bc8ea761593042131ed69f
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-uefi-memstick.img) = fff7fd50b4e7207dfde29058d8e28ea7f2d07af19419a00ed208315c12e8e082c38b7fc3ccb31c50d86ad9c8d4763014b796204da689159393c642ee50f7c9a8
SHA512 (HardenedBSD-10-STABLE-v46.12-amd64-uefi-mini-memstick.img) = b7d5c2ef974d9ad4f280351475c8934f696c4dadb91273dcd95be1a53a8c08a1bbd2fd4082e9bd3581885fe467aba09a4644a9d8752be8ce4d4ac4a378817b03


CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=VzeW
-----END PGP SIGNATURE-----

HardenedBSD-10-STABLE-v46.11 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

* cron username handling fix (6da7f85) [FreeBSD SA candidate]

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

Image checksums:
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-bootonly.iso) = 1655afce770b77b924440a39ee3472546bebdea87ea0288816ce5d057e65575691d77d059d82c4cd2121f699462726f20bc6781ffe92e42316aad8b86fb67bc0
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-disc1.iso) = 0f3cc560cf7bec853ea5515a6799997aa68a0ed53d1653602be56eaafe7056a7a583a92fb4a75c95fe5ef60eb5a7d6204c36aa2526b11606cc420cec520a31ff
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-memstick.img) = 61febc5845f56864851cccaf179d6087d4c88c5ceb5a3ed0d77668fbe6f8533c6f2341522e14dc62a38d959eeec15f1c85411b437f020faa3a7fdca5f4c4b7fc
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-mini-memstick.img) = a54cb81dba74a97f11f0faa24bde416101c4e9d267fc36f08e80a265a1282cc8dda37374706d645943fe71f6710f60a280bf62db21815949599d5d97e68ca03a
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-uefi-bootonly.iso) = 95905c1d8fcbefec57c24f7d7c3181b4e3958c57e281ffcfd26fb38f7b952e21e4c93e28c7d42ce0fd6548c978479674de8af7efd8a7d29aa48c6e3e7c128c89
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-uefi-disc1.iso) = dad2a2e9ebbd2f7271a03edc788867cf32c584d53f8ec5df9ec116b3bf109300e8bcea137363b8095599517f8dc044275842aa8a4ea07e20693e70db6b157d8d
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-uefi-memstick.img) = 1253829cefa880b7e80f6213781ac1d20f820666c912b926779dae33d10d40ebb2429b0eeeafab69ac254689788d5ebf11ba40aeb5ee4b57999487e46eebe1f0
SHA512 (HardenedBSD-10-STABLE-v46.11-amd64-uefi-mini-memstick.img) = 4814bf61bf60acfe248f0f23ce7787b4d187ecfa0bf66dc5b55deaa2f06baeb43067a018f2fb7436bce667b92679dab655f1a8c280478b7eeff885ef2fc96e9b

HardenedBSD-11-STABLE-v46.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Installers: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...
Git repo: https://github.com/HardenedBSD/hardenedBSD-stable.git

Highlights:
libarchive update (CVE fixes, FreeBSD SA candidate)
sqlite update (CVE fixes, FreeBSD SA candidate)

Bernard Spil has done a wonderful job in importing and maintaining LibreSSL for HardenedBSD. LibreSSL in base has undergone thorough testing over a period of multiple months. We use LibreSSL in our infrastructure. When we publish our first official release, HardenedBSD 11.0-RELEASE, LibreSSL will be the default.

We have now enabled LibreSSL by default in the hardened/current/master branch. We have started a new package build with LibreSSL enabled for that branch. We are also building binary updates that will get pushed out within the next six to eight hours.

HardenedBSD-11-STABLE-v46.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...