The change list on github for the lazy:
sdcardfs: update sdcardfs version
merge cve patch CVE-2017-6425 msm: mdss: Clear compat structures before copying to user)
merge cve patch CVE-2017-6423 soc: qcom: make debugfs support configurable for kryo l2 accessors)
merge cve patch CVE-2017-6426 platform: msm: spmi: Fix possible race condition in debugfs)
merge cve patch CVE-2017-0576 crypto: msm: check integer overflow on total data len in qcedev.c)
merge cve patch CVE-2017-0462 seemp: use local stack mem when encoding params)
merge cve patch CVE-2017-0454 ASoC: msm: qdspv2: add mutex lock when access output buffer length)
merge cve patch CVE-2016-10236 USB: gadget: mbim: Avoid copying uninitialized data to userspace)
usb: change product name to OnePlus for Android Auto
rtc: remove unused debug logs