commit 789f444285aedfb04af7aa3748aa52e99ac4bd8f
Author: Greg Kroah-Hartman <gregkh@suse.de>
Date:   Mon Jan 30 22:52:07 2006 -0800

    Linux 2.6.14.7

commit 703b69791369263e1d15f88f3e6aed02c1514fc2
Author: Patrick McHardy <kaber@trash.net>
Date:   Tue Jan 10 02:00:07 2006 +0100

    [PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)
    
    The PPTP NAT helper calculates the offset at which the packet needs
    to be mangled as difference between two pointers to the header. With
    non-linear skbs however the pointers may point to two seperate buffers
    on the stack and the calculation results in a wrong offset beeing
    used.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 988042953360dcc04a965965f08e11b7e8329328
Author: Patrick McHardy <kaber@trash.net>
Date:   Tue Jan 10 02:00:07 2006 +0100

    [PATCH] Fix crash in ip_nat_pptp (CVE-2006-0036)
    
    When an inbound PPTP_IN_CALL_REQUEST packet is received the
    PPTP NAT helper uses a NULL pointer in pointer arithmentic to
    calculate the offset in the packet which needs to be mangled
    and corrupts random memory or crashes.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 7d5e09f7dc89aff4b6cfa42ca686f3b20eacfdbd
Author: David S. Miller <davem@davemloft.net>
Date:   Tue Jan 10 13:31:59 2006 -0800

    [PATCH] Fix sys_fstat64() entry in 64-bit syscall table.
    
    Noticed by Jakub Jelinek.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 94a3817e06b6bcbd20a22ea6ab05a855ce4ecaaf
Author: Richard Mortimer <richm@oldelvet.org.uk>
Date:   Tue Jan 10 13:30:54 2006 -0800

    [PATCH] Fix ptrace/strace
    
    Don't clobber register %l0 while checking TI_SYS_NOERROR value in
    syscall return path.  This bug was introduced by:
    
    db7d9a4eb700be766cc9f29241483dbb1e748832
    
    Problem narrowed down by Luis F. Ortiz and Richard Mortimer.
    
    I tried using %l2 as suggested by Luis and that works for me.
    
    Looking at the code I wonder if it makes sense to simplify the code
    a little bit. The following works for me but I'm not sure how to
    exercise the "NOERROR" codepath.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 03e75b58859a910bd75ab7d9e6b729391d2d83c3
Author: Bart De Schuymer <bdschuym@pandora.be>
Date:   Tue Jan 10 13:13:45 2006 -0800

    [PATCH] Don't match tcp/udp source/destination port for IP fragments
    
    Signed-off-by: Bart De Schuymer <bdschuym@pandora.be>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit b31dce1543d61c980f2264f91c73ece0dccd09b6
Author: Shaohua Li <shaohua.li@intel.com>
Date:   Wed Nov 30 03:34:42 2005 -0800

    [PATCH] setting irq affinity is broken in ia32 with MSI enabled
    
    Setting irq affinity stops working when MSI is enabled.  With MSI, move_irq
    is empty, so we can't change irq affinity.  It appears a typo in Ashok's
    original commit for this issue.  X86_64 actually is using move_native_irq.
    
    Signed-off-by: Shaohua Li <shaohua.li@intel.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>