Apply David Martineau's CVE-2005-2090 patch
tag release as 2.6+pcidss