A fixed kernel now is on security.d.o => no need to play tricks with
proposed-updates anymore.