diff --git a/patch/kernel/mvebu-next/packaging-4.x-NEXT-with-postinstall-scripts.patch b/patch/kernel/mvebu-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
index 53c827bb11..797b6fddc6 100644
--- a/patch/kernel/mvebu-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
+++ b/patch/kernel/mvebu-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
@@ -1,5 +1,5 @@
 diff --git a/scripts/package/builddeb b/scripts/package/builddeb
-index aad67000..006d8ec7 100755
+index aad67000..b4f574e7 100755
 --- a/scripts/package/builddeb
 +++ b/scripts/package/builddeb
 @@ -29,6 +29,28 @@ create_package() {
@@ -128,7 +128,15 @@ index aad67000..006d8ec7 100755
  # Try to determine maintainer and email values
  if [ -n "$DEBEMAIL" ]; then
         email=$DEBEMAIL
-@@ -329,12 +409,15 @@ if grep -q '^CONFIG_GCC_PLUGINS=y' $KCONFIG_CONFIG ; then
+@@ -318,6 +398,7 @@ fi
+ # Build kernel header package
+ (cd $srctree; find . -name Makefile\* -o -name Kconfig\* -o -name \*.pl) > "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find arch/*/include include scripts -type f) >> "$objtree/debian/hdrsrcfiles"
++(cd $srctree; find security/*/include -type f) >> "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find arch/$SRCARCH -name module.lds -o -name Kbuild.platforms -o -name Platform) >> "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find $(find arch/$SRCARCH -name include -o -name scripts -type d) -type f) >> "$objtree/debian/hdrsrcfiles"
+ if grep -q '^CONFIG_STACK_VALIDATION=y' $KCONFIG_CONFIG ; then
+@@ -329,12 +410,15 @@ if grep -q '^CONFIG_GCC_PLUGINS=y' $KCONFIG_CONFIG ; then
  fi
  destdir=$kernel_headers_dir/usr/src/linux-headers-$version
  mkdir -p "$destdir"
@@ -144,7 +152,7 @@ index aad67000..006d8ec7 100755
  cat <<EOF >> debian/control
  
  Package: $kernel_headers_packagename
-@@ -363,6 +446,16 @@ fi
+@@ -363,6 +447,16 @@ fi
  
  cat <<EOF >> debian/control
  
@@ -161,7 +169,7 @@ index aad67000..006d8ec7 100755
  Package: $libc_headers_packagename
  Section: devel
  Provides: linux-kernel-headers
-@@ -374,7 +467,7 @@ EOF
+@@ -374,7 +468,7 @@ EOF
  
  if [ "$ARCH" != "um" ]; then
  	create_package "$kernel_headers_packagename" "$kernel_headers_dir"
diff --git a/patch/kernel/sunxi-next/packaging-4.x-NEXT-with-postinstall-scripts.patch b/patch/kernel/sunxi-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
index 53c827bb11..797b6fddc6 100644
--- a/patch/kernel/sunxi-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
+++ b/patch/kernel/sunxi-next/packaging-4.x-NEXT-with-postinstall-scripts.patch
@@ -1,5 +1,5 @@
 diff --git a/scripts/package/builddeb b/scripts/package/builddeb
-index aad67000..006d8ec7 100755
+index aad67000..b4f574e7 100755
 --- a/scripts/package/builddeb
 +++ b/scripts/package/builddeb
 @@ -29,6 +29,28 @@ create_package() {
@@ -128,7 +128,15 @@ index aad67000..006d8ec7 100755
  # Try to determine maintainer and email values
  if [ -n "$DEBEMAIL" ]; then
         email=$DEBEMAIL
-@@ -329,12 +409,15 @@ if grep -q '^CONFIG_GCC_PLUGINS=y' $KCONFIG_CONFIG ; then
+@@ -318,6 +398,7 @@ fi
+ # Build kernel header package
+ (cd $srctree; find . -name Makefile\* -o -name Kconfig\* -o -name \*.pl) > "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find arch/*/include include scripts -type f) >> "$objtree/debian/hdrsrcfiles"
++(cd $srctree; find security/*/include -type f) >> "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find arch/$SRCARCH -name module.lds -o -name Kbuild.platforms -o -name Platform) >> "$objtree/debian/hdrsrcfiles"
+ (cd $srctree; find $(find arch/$SRCARCH -name include -o -name scripts -type d) -type f) >> "$objtree/debian/hdrsrcfiles"
+ if grep -q '^CONFIG_STACK_VALIDATION=y' $KCONFIG_CONFIG ; then
+@@ -329,12 +410,15 @@ if grep -q '^CONFIG_GCC_PLUGINS=y' $KCONFIG_CONFIG ; then
  fi
  destdir=$kernel_headers_dir/usr/src/linux-headers-$version
  mkdir -p "$destdir"
@@ -144,7 +152,7 @@ index aad67000..006d8ec7 100755
  cat <<EOF >> debian/control
  
  Package: $kernel_headers_packagename
-@@ -363,6 +446,16 @@ fi
+@@ -363,6 +447,16 @@ fi
  
  cat <<EOF >> debian/control
  
@@ -161,7 +169,7 @@ index aad67000..006d8ec7 100755
  Package: $libc_headers_packagename
  Section: devel
  Provides: linux-kernel-headers
-@@ -374,7 +467,7 @@ EOF
+@@ -374,7 +468,7 @@ EOF
  
  if [ "$ARCH" != "um" ]; then
  	create_package "$kernel_headers_packagename" "$kernel_headers_dir"