Linux 2.6.18.6

[Chris Wright <chrisw@sous-sol.org>]

We (the -stable team) are announcing the release of the 2.6.18.6 kernel.
An assortment of important fixes with one security related fix that is
associated with less common bluetooth hardware:

1dca7c28: Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)

The diffstat and short summary of the fixes are below.

I'll also be replying to this message with a copy of the patch between
2.6.18.5 and 2.6.18.6, as it is small enough to do so.
                                                                                
The updated 2.6.18.y git tree can be found at:                                  
        git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-2.6.18.y.git 
and can be browsed at the normal kernel.org git web browser:                    
        www.kernel.org/git/                                                     

thanks,
-chris
--------

 Makefile                                      |    2 
 arch/arm/kernel/calls.S                       |   13 +++++
 arch/m32r/kernel/entry.S                      |   65 +++++++++++---------------
 arch/x86_64/kernel/setup.c                    |    5 +-
 drivers/ieee1394/ohci1394.c                   |   21 ++++++--
 drivers/md/dm-crypt.c                         |    6 +-
 drivers/md/dm-snap.c                          |    1 
 drivers/media/dvb/frontends/lgdt330x.c        |    6 --
 drivers/media/video/tuner-simple.c            |    2 
 drivers/media/video/tuner-types.c             |   14 -----
 drivers/net/bonding/bond_main.c               |    2 
 drivers/net/forcedeth.c                       |    3 +
 drivers/net/sunhme.c                          |    5 ++
 fs/compat.c                                   |    2 
 include/asm-arm/unistd.h                      |   13 +++++
 include/asm-m32r/ptrace.h                     |   28 +----------
 include/asm-m32r/sigcontext.h                 |   13 -----
 kernel/softirq.c                              |    2 
 net/bluetooth/cmtp/capi.c                     |   39 +++++++++++++--
 net/bridge/netfilter/ebtables.c               |   54 +++++++++++++--------
 net/ieee80211/softmac/ieee80211softmac_scan.c |    2 
 net/ipv4/netfilter/ip_tables.c                |    5 +-
 net/ipv4/route.c                              |    2 
 net/ipv4/xfrm4_policy.c                       |    2 
 net/irda/irttp.c                              |    4 -
 net/sched/act_gact.c                          |    4 -
 net/sched/act_police.c                        |   26 ++++++++--
 27 files changed, 199 insertions(+), 142 deletions(-)

Summary of changes from v2.6.18.5 to v2.6.18.6
============================================

Al Viro (4):
      EBTABLES: Fix wraparounds in ebt_entries verification.
      EBTABLES: Verify that ebt_entries have zero ->distinguisher.
      EBTABLES: Deal with the worst-case behaviour in loop checks.
      EBTABLES: Prevent wraparounds in checks for entry components' sizes.

Andrey Mirkin (1):
      skip data conversion in compat_sys_mount when data_page is NULL

Andy Gospodarek (1):
      bonding: incorrect bonding state reported via ioctl

Arjan van de Ven (1):
      x86-64: Mark rdtsc as sync only for netburst, not for core2

Chris Wright (1):
      Linux 2.6.18.6

Christophe Saout (1):
      dm crypt: Fix data corruption with dm-crypt over RAID5

Daniel Barkalow (1):
      forcedeth: Disable INTx when enabling MSI in forcedeth

David Miller (3):
      PKT_SCHED act_gact: division by zero
      XFRM: Use output device disable_xfrm for forwarded packets
      IPSEC: Fix inetpeer leak in ipv4 xfrm dst entries.

Hans Verkuil (1):
      V4L: Fix broken TUNER_LG_NTSC_TAPE radio support

Hirokazu Takata (1):
      m32r: make userspace headers platform-independent

Jeet Chaudhuri (1):
      IrDA: Incorrect TTP header reservation

Jurij Smakov (1):
      SUNHME: Fix for sunhme failures on x86

Marcel Holtmann (1):
      Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)

Michael Buesch (1):
      softmac: remove netif_tx_disable when scanning

Michael Krufky (1):
      DVB: lgdt330x: fix signal / lock status detection bug

Milan Broz (1):
      dm snapshot: fix freeing pending exception

Patrick McHardy (2):
      NET_SCHED: policer: restore compatibility with old iproute binaries
      NETFILTER: ip_tables: revision support for compat code

Russell King (1):
      ARM: Add sys_*at syscalls

Stefan Richter (1):
      ieee1394: ohci1394: add PPC_PMAC platform code to driver probe

Zachary Amsden (1):
      softirq: remove BUG_ONs which can incorrectly trigger