diff --git a/debian/changelog b/debian/changelog
index 921f4786c..bebb785e2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -14,13 +14,6 @@ linux (3.12.2-1~exp1) UNRELEASED; urgency=low
   * Enable CHECKPOINT_RESTORE (Closes: #682700)
   * Enable JUMP_LABEL (Closes: #730071)
   * [x86] staging: Enable CRYSTALHD as module (Closes: #730832)
-  * net: clamp ->msg_namelen instead of returning an error
-  * tcp: tsq: restore minimal amount of queueing
-  * rds: prevent BUG_ON triggered on congestion update to loopback
-    (CVE-2012-2372)
-  * ipv6: fix headroom calculation in udp6_ufo_fragment (CVE-2013-4563)
-  * [s390,s390x] qeth: avoid buffer overflow in snmp ioctl (CVE-2013-6381)
-  * xfs: underflow bug in xfs_attrlist_by_handle() (CVE-2013-6382)
   * aufs: Update to aufs3.12-20131111 (no functional change)
   * [rt] Update to 3.12.1-rt4
   * udeb: Add snd-usb-hiface to sound-modules, thanks to Samuel Thibault
@@ -84,6 +77,95 @@ linux (3.12~rc7-1~exp1) experimental; urgency=low
 
  -- Ben Hutchings <ben@decadent.org.uk>  Mon, 28 Oct 2013 04:12:20 +0000
 
+linux (3.11.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.9
+    - net/mlx4_core: Fix call to __mlx4_unregister_mac
+    - net: sctp: do not trigger BUG_ON in sctp_cmd_delete_tcb
+    - cxgb3: Fix length calculation in write_ofld_wr() on 32-bit architectures
+    - tcp: gso: fix truesize tracking
+    - xen-netback: Handle backend state transitions in a more robust way
+    - xen-netback: transition to CLOSED when removing a VIF
+    - [x86] hyperv-fb: add pci stub
+    - tracing: Fix potential out-of-bounds in trace_get_user()
+    - perf: Fix perf ring buffer memory ordering
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.10
+    - ACPICA: DeRefOf operator: Update to fully resolve FieldUnit and
+      BufferField refs.
+    - libertas: potential oops in debugfs (CVE-2013-6378)
+    - aacraid: prevent invalid pointer dereference
+    - ACPICA: Return error if DerefOf resolves to a null package element.
+    - ACPICA: Fix for a Store->ArgX when ArgX contains a reference to a field.
+    - USB: mos7840: fix tiocmget error handling
+    - Btrfs: relocate csums properly with prealloc extents
+    - [s390,s390x] crypto: s390 - Fix aes-cbc IV corruption
+    - can: c_can: Fix RX message handling, handle lost message before EOB
+    - ipc,shm: correct error return value in shmctl (SHM_UNLOCK)
+    - ipc,shm: fix shm_file deletion races
+    - drm/nvc0-/gr: fix a number of missing explicit array terminators...
+    - sched, idle: Fix the idle polling state logic
+    - [x86] ACPI / EC: Ensure lock is acquired before accessing ec struct
+      members
+    - [x86] ACPI / video: Quirk initial backlight level 0
+    - Staging: zram: Fix access of NULL pointer
+    - Drivers: hv: vmbus: Fix a bug in channel rescind code
+    - rt2x00: fix a crash bug in the HT descriptor handling fix
+    - Bluetooth: revert: "Bluetooth: Add missing reset_resume dev_pm_ops"
+    - exec/ptrace: fix get_dumpable() incorrect tests (CVE-2013-2929)
+
+  [ Ben Hutchings ]
+  * net: clamp ->msg_namelen instead of returning an error
+  * tcp: tsq: restore minimal amount of queueing
+  * rds: prevent BUG_ON triggered on congestion update to loopback
+    (CVE-2012-2372)
+  * ipv6: fix headroom calculation in udp6_ufo_fragment (CVE-2013-4563)
+  * [s390,s390x] qeth: avoid buffer overflow in snmp ioctl (CVE-2013-6381)
+  * xfs: underflow bug in xfs_attrlist_by_handle() (CVE-2013-6382)
+  * [x86] Enable CHROMEOS_LAPTOP as module (Closes: #731271)
+    - iio/light: Enable SENSORS_TSL2563, SENSORS_ISL29018, TSL2583 as modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 04 Dec 2013 14:49:01 +0000
+
+linux (3.11.8-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.8
+    - bcache: Fixed incorrect order of arguments to bio_alloc_bioset()
+    - cgroup: fix to break the while loop in cgroup_attach_task() correctly
+    - mac80211: drop spoofed packets in ad-hoc mode
+    - mac80211: fix crash if bitrate calculation goes wrong
+    - rtlwifi: rtl8192cu: Fix error in pointer arithmetic
+    - jfs: fix error path in ialloc
+    - SCSI: sd: call blk_pm_runtime_init before add_disk
+    - ecryptfs: Fix memory leakage in keystore.c
+    - eCryptfs: fix 32 bit corruption issue
+    - raid5: set bio bi_vcnt 0 for discard request
+    - raid5: avoid finding "discard" stripe
+    - libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures
+    - Revert "epoll: use freezable blocking call"
+    - Revert "select: use freezable blocking call"
+    - md: Fix skipping recovery for read-only arrays.
+    - vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter
+    - Fix a few incorrectly checked [io_]remap_pfn_range() calls
+    - lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
+    - aacraid: missing capable() check in compat ioctl
+    - mm: Wait for THP migrations to complete during NUMA hinting faults
+    - mm: Prevent parallel splits during THP migration
+    - mm: Close races between THP migration and PMD numa clearing
+    - mm/pagewalk.c: fix walk_page_range() access of wrong PTEs
+    - drm: Prevent overwriting from userspace underallocating core ioctl
+      structs
+    - seq_file: always update file->f_pos in seq_lseek()
+
+  [ Ben Hutchings ]
+  * perf/ftrace: Fix paranoid level for enabling function tracer
+    (CVE-2013-2930)
+  * [armhf] Bump ABI to 2
+  * [armhf/armmp] udeb: Add zlib-modules (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 13 Nov 2013 05:36:36 +0000
+
 linux (3.11.7-1) unstable; urgency=low
   
   * New upstream stable update:
diff --git a/debian/config/config b/debian/config/config
index 731534f9a..0b9c03254 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -1022,6 +1022,7 @@ CONFIG_TOUCHSCREEN_AD7877=m
 CONFIG_TOUCHSCREEN_AD7879=m
 CONFIG_TOUCHSCREEN_AD7879_I2C=m
 # CONFIG_TOUCHSCREEN_AD7879_SPI is not set
+#. Chromebook Pixel
 CONFIG_TOUCHSCREEN_ATMEL_MXT=m
 # CONFIG_TOUCHSCREEN_BU21013 is not set
 # CONFIG_TOUCHSCREEN_CY8CTMG110 is not set
diff --git a/debian/config/kernelarch-x86/config b/debian/config/kernelarch-x86/config
index c0d7560b3..96a3029c1 100644
--- a/debian/config/kernelarch-x86/config
+++ b/debian/config/kernelarch-x86/config
@@ -570,6 +570,12 @@ CONFIG_SCx200_ACB=m
 ##
 CONFIG_INTEL_IDLE=y
 
+##
+## file: drivers/iio/light/Kconfig
+##
+#. Cr-48, Acer AC700
+CONFIG_SENSORS_TSL2563=m
+
 ##
 ## file: drivers/input/gameport/Kconfig
 ##
@@ -1122,6 +1128,7 @@ CONFIG_X86_PLATFORM_DEVICES=y
 CONFIG_ACER_WMI=m
 CONFIG_ACERHDF=m
 CONFIG_ASUS_LAPTOP=m
+CONFIG_CHROMEOS_LAPTOP=m
 CONFIG_DELL_LAPTOP=m
 CONFIG_DELL_WMI=m
 CONFIG_DELL_WMI_AIO=m
@@ -1342,6 +1349,14 @@ CONFIG_CRYSTALHD=m
 ##
 CONFIG_ET131X=m
 
+##
+## file: drivers/staging/iio/light/Kconfig
+##
+#. Samsung Series 5 550, Chromebook Pixel
+CONFIG_SENSORS_ISL29018=m
+#. Samsung Series 5
+CONFIG_TSL2583=m
+
 ##
 ## file: drivers/staging/line6/Kconfig
 ##