Your friendly security team received the following report via oss-security.
Please respond ASAP.
------------------------------------------------------------------------------
Date: Tue, 01 Nov 2011 20:54:37 +0530
From: Huzaifa Sidhpurwala <huzaifas@redhat.com>
Subject: [oss-security] libcap/capsh: does not chdir after chroot

Hi All,

It was found that capsh program, usually shipped with the libcap
package, did not do a chdir("/") after calling chroot, when called with
a "--chroot" option. This resulted in the current directory being
outside the chroot.

This has been assigned CVE-2011-4099

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=722694


-- 
Huzaifa Sidhpurwala / Red Hat Security Response Team