diff --git a/libcap-array-range-fix.diff b/libcap-array-range-fix.diff
new file mode 100644
index 0000000..41d9f89
--- /dev/null
+++ b/libcap-array-range-fix.diff
@@ -0,0 +1,11 @@
+--- libcap/cap_extint.c-dist	2007-01-24 12:04:05.000000000 +0100
++++ libcap/cap_extint.c	2007-01-24 12:04:48.000000000 +0100
+@@ -105,7 +105,7 @@ cap_t cap_copy_int(const void *cap_ext)
+        return NULL;
+ 
+     blen = export->length_of_capset;
+-    for (set=0; set<=NUMBER_OF_CAP_SETS; ++set) {
++    for (set=0; set<NUMBER_OF_CAP_SETS; ++set) {
+ 	int blk;
+ 	int bno = 0;
+ 	for (blk=0; blk<(CAP_SET_SIZE/4); ++blk) {
diff --git a/libcap.changes b/libcap.changes
index 7132c70..609d32e 100644
--- a/libcap.changes
+++ b/libcap.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Jan 24 12:05:59 CET 2007 - tiwai@suse.de
+
+- fix the access over array range in cap_extint.c (#237943).
+
 -------------------------------------------------------------------
 Tue Dec 19 18:32:28 CET 2006 - tiwai@suse.de
 
diff --git a/libcap.spec b/libcap.spec
index 196337c..9d99f34 100644
--- a/libcap.spec
+++ b/libcap.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libcap (Version 1.10)
 #
-# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
 # This file and all modifications and additions to the pristine
 # package are under the same license as the package itself.
 #
@@ -16,7 +16,7 @@ Group:          System/Libraries
 Autoreqprov:    on
 Summary:        Library and Binaries for Capabilities (linux-privs) Support
 Version:        1.10
-Release:        1
+Release:        4
 Source:         ftp://ftp.de.kernel.org/pub/linux/libs/security/linux-privs/old/kernel-2.4/libcap-1.10.tar.bz2
 Source3:        ftp://ftp.de.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.4/uid-proc.patch
 Source4:        ftp://ftp.de.kernel.org/pub/linux/libs/security/linux-privs/old/kernel-2.4/README
@@ -28,6 +28,7 @@ Patch1:         libcap-shlib-fix.diff
 Patch3:         libcap.eal3.diff
 Patch4:         libcap-gcc-warning-fixes.diff
 Patch6:         libcap-invalid-free-fix.diff
+Patch7:         libcap-array-range-fix.diff
 #URL:		http://www.kernel.org/
 #Prefix:       /usr
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -67,6 +68,7 @@ using libcap.
 %patch3 -p2
 %patch4
 %patch6
+%patch7
 
 %build
 lib=%{_lib} make LDFLAGS= COPTFLAG="$RPM_OPT_FLAGS"
@@ -100,6 +102,8 @@ rm $RPM_BUILD_ROOT%{_mandir}/man2/{capget,capset}.2*
 %{_mandir}/man3/*
 
 %changelog -n libcap
+* Wed Jan 24 2007 - tiwai@suse.de
+- fix the access over array range in cap_extint.c (#237943).
 * Tue Dec 19 2006 - tiwai@suse.de
 - update to libcap-1.10 to support fscaps (#229722, FATE#301748)
 * Wed May 24 2006 - schwab@suse.de