diff --git a/debian/changelog b/debian/changelog
index bb5841bc3..95d2e7abe 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -15,6 +15,9 @@ linux (4.5-1~exp1) UNRELEASED; urgency=medium
   * [armel/versatile] Enable GPIOLIB, new dependency of SMC91X (fixes FTBFS)
   * [x86] input: Enable ASUS_WIRELESS as module (Closes: #818487)
   * [x86] amdgpu: Enable DRM_AMD_POWERPLAY (Closes: #818174)
+  * [x86] Enable RANDOMIZE_BASE (kASLR). This is incompatible with hibernation,
+    so you must use the kernel parameter "kaslr" to enable kASLR and disable
+    hibernation at boot time. (Closes: #816067)
 
  -- Martin Michlmayr <tbm@cyrius.com>  Thu, 10 Mar 2016 19:03:00 -0800
 
diff --git a/debian/config/kernelarch-x86/config b/debian/config/kernelarch-x86/config
index 962f793b0..e8b54bee4 100644
--- a/debian/config/kernelarch-x86/config
+++ b/debian/config/kernelarch-x86/config
@@ -59,7 +59,7 @@ CONFIG_KEXEC=y
 CONFIG_CRASH_DUMP=y
 # CONFIG_KEXEC_JUMP is not set
 CONFIG_RELOCATABLE=y
-# CONFIG_RANDOMIZE_BASE is not set
+CONFIG_RANDOMIZE_BASE=y
 CONFIG_HOTPLUG_CPU=y
 # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
 # CONFIG_DEBUG_HOTPLUG_CPU0 is not set