This patch corrects the following:

- A potential security vulnerability has been discovered in BIND (Domain Name
  Service), where under certain circumstances, system integrity may be
  compromised. This may be in the form of improper file or privilege management.
  DIGITAL has corrected this potential vulnerability.

- Corrects a problem where, if the FLAG bit is set in the IP header, screend
  incorrectly reports: ACCEPT: Not first frag, off 64

- Fixes a panic with the panic string "spec_badop called" that can sometimes
  occur when an fpathconf system call is issued for a file in an AdvFS
  filesystem.  The panic has following stack trace:

        panic (s = "spec_badop called")
        spec_badop
        fpathconf
        syscall
        _Xsyscall

- A potential security vulnerability has been discovered, where under certain
  circumstances, system integrity may be compromised.  This may be in the form
  of improper file or privilege management. DIGITAL has corrected this potential
  vulnerability.