[Nexus 5 Android Development] androcraze:
Updated ROM to 6.0.1_r77-20161209.

- Doze tested and operational

- WebView modification tested and operational (verified with version 54)

- Reboot menu tested and operational

I figured that since the November Security Update was omitted for the N5, Google was done with it. That's not the case, at least for December. Under "Settings -> About phone -> Security patch level", "October 5, 2016" is the date given in both the r77 code base and the M4B30Z Factory ROM; r77 is the current December release, so I imagine it's an omission in the code base.

A rough changelog from r74 to r77:

98faa36 30481342: Security Vulnerability - TOCTOU in MmsProvider allows access to files as phone (radio) uid
1144039 adb: switch the socket list mutex to a recursive_mutex.
3b26864 adb: use asocket's close function when closing.
3d4cb8b Add bound checks to utf16_to_utf8
637501e Add bound checks to utf16_to_utf8
4f7b529 Add EFFECT_CMD_SET_PARAM parameter checking
47c5adb ANQPFactory: catch all potential parsing errors
dda9d70 better validation lengths of strings in ID3 tags
3d2b855 Bind fingerprint when we start authentication - DO NOT MERGE
f3723a4 Camera metadata: Check for inconsistent data count
0338e16 Camera: Prevent data size overflow
135ea8b Check caller's uid before allowing notification policy access.
0cfcb79 CipherTest: in ASN1 encoding for GCM, no value for tag size means 12
e86d0e1 debuggerd: fix missed use of ptrace(PTRACE_ATTACH).
ad61a3d disable unpriv perf by default in user{,debug} builds
2a74727 Do not allow premium SMS during SuW
eb11f3a DO NOT MERGE - stagefright: fix integer overflow error
de80342 DO NOT MERGE | libvpx: cherry-pick aa1c813 from upstream
94ada5c DO NOT MERGE add private function convertSafeLable
a2041d6 DO NOT MERGE Block the user from entering safe boot mode
dbee7f4 DO NOT MERGE ServiceManager: Restore basic uid check
e441275 DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble
43b5aa6 DO NOT MERGE: Allow apps with CREATE_USERS permission to call UM.getProfiles.
00fad46 DO NOT MERGE: Clean up when recycling a pid with a pending launch
d2d9568 DO NOT MERGE: debuggerd: verify that traced threads belong to the right process.
d473eff DO NOT MERGE: Fix CTS regression
2dde02e DO NOT MERGE: Fix vulnerability where large GPS XTRA data can be injected. -Can potentially crash system with OOM. Bug: 29555864
efec38a DO NOT MERGE: Remove the use of JHEAD in ExifInterface
092d6da Enforce calling identity before clearing.
05713f1 Fix build
361db9e Fix build
2a1a0fd fix build
0891040 Fix build breakage caused by commit 940829f69b52d6038db66a9c727534636ecc456d.
e9ef850 Fix corruption via buffer overflow in mediaserver
cc623b7 Fix NULL pointer dereference
2e40f26 Fix string equality comparison
e30579f Fix vold vulnerability in FrameworkListener
ae3aef2 Fix vulnerability in LockSettings service
426ab80 Fixed error concealment when no MBs are decoded in the current pic
97b2520 flo: update prebuilt kernel [ DO NOT MERGE ]
ce9127a flounder: update kernel prebuild (Jul MR2) (DO NOT MERGE)
775185a fugu: update prebuilt kernel [DO NOT MERGE]
52030b3 GCMParameters: in ASN1 encoding, use 12 when no value is specified
ec1aa99 hammerhead: update prebuilt kernel [ DO NOT MERGE ]
f2059d3 libutils/Unicode.cpp: Correct length computation and add checks for utf16->utf8
a549245 Limit account id and id to longs
23cc314 Make TTY broadcasts protected
f42ee8b MediaPlayerService: allow next player to be NULL
4c086a8 MediaPlayerService: avoid invalid static cast
9d32255 omx: prevent input port enable/disable for software codecs
ed4f365 OMXCodec: check IMemory::pointer() before using allocation
354b53f Pre-setup restrictions DO NOT MERGE
a08dfe9 Process: Fix communication with zygote.
07cd4cd Region: Detect malicious overflow in unflatten
2124ddc Replace variable-length arrays on stack with malloc.
390c2d3 ServiceManager: Allow system services running as secondary users to add services
cb96875 shamu: update prebuilt kernel [ DO NOT MERGE ]
10db5e0 SoftMP3: memset safely
b569311 SoftMPEG4: Check the buffer size before writing the reference frame.
356f1de SoftVPX: fix nFilledLen overflow
b6af3b9 soundtrigger: add size check on sound model and recogntion data
2ef9ce5 src/libFLAC/stream_decoder.c : Fix NULL de-reference.
e81af03 stop exporting EmailAccountCacheProvider
8f69770 Update comments around PLATFORM_SECURITY_LEVEL
c952e8f Update comments around PLATFORM_SECURITY_LEVEL
312b898 Update Security String to 2016-10-01 to platform and CTS for October Security
146e3a5 Update Security String to 2016-10-01 to platform and CTS for October Security
e3ab148 Update Security String to 2016-10-05 to Platform and CTS for October Security Updates (rebased)
cad4c75 Update Security String to 2016-10-05 to Platform and CTS for October Security Updates (rebased)
fc6c67c VenueNameElement: fix off-by-one enum bounds check
9091f32 WifiEnterpriseConfiguration: Do not print credentials in toString

Another dull, boring release. Enjoy.

EDIT: Xposed should be fixed for 6.0.1, or my last reading stated it was. If it isn't, please let me know.