KCFLAGS is too late for gcc flags detection logic. So embed the
-fno-pie flag directly to CC. This fixes the error:
Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not supported by compiler

fixes #6217
fixes #6469
fixes #6473

sysfs will probe modules at least under EFI boot
fixes #6474

Fabian Affolter authored Nov 09, 2016 and Carlo Landmeter committed Nov 24, 2016

Voluptuous is a Python data validation library
https://github.com/alecthomas/voluptuous

fixes #5191
fixes #6486

ref #5191
ref #6486

Daniel Sabogal authored Nov 22, 2016 and Timo Teräs committed Nov 24, 2016

CVE-2016-8674
CVE-2016-6525 (patch removed)
CVE-2016-6265 (patch removed)

Daniel Sabogal authored Nov 23, 2016 and Timo Teräs committed Nov 24, 2016

CVE-2016-8568
CVE-2016-8569