AV-XXXXX-RK Digital Equipment Corporation Customer Support Center 305 Rockrimmon Blvd. Colorado Springs, CO 80919 Dear Digital Customer, The Digital Customer Support Centers are pleased to provide this customer service. ID: CSCPAT_4061 V1.0 PRODUCT: DEC OSF/1 V1.2, V1.3 & V2.0 Cover letter for fixes to potential security vulnerabil- ities with with DEC OSF/1 V1.2 through V2.0. The kits have been created to correct potential security vulnerabilities where, under certain circumstances, user access or privilege may be expanded. Installation Instructions If you received this kit electronically, copy the tar archive to a temporary directory, such as /usr/tmp. Use the tar command as root to extract the patch files from the patch archive: % su # tar xvf cscpat_4061010.tar If you received this kit on media then extract the archive from tape to the temporary directory: % su # tar xv This archive provides the following files: o README.SECURITY o SECURITYv12AXP.tar o SECURITYv13AXP.tar o SECURITYv20AXP.tar Select the .tar kit for the appropriate operating system version. Follow the installation instructions contained in README.SECURITY. Your confidence in Digital's products is very much ap- preciated, and we acknowledge your patience with any inconvenience caused by this matter. CSC Software Support WARNING This ECO has not been through an exhaustive field test process. Due to the experimental stage of this software ECO/workaround, Digital makes no representations regarding its use, or performance. The customer shall have the sole responsibility for adequate protection, including back-up data used in conjunction with the above software ECO/workaround Copyright (c) Digital Equipment Corporation, 1993 All Rights Reserved. Unpublished rights reserved under the copyright laws of the United States. The software contained on this media is proprietary to and embodies the confidential technology of Digital Equipment Corporation. Possession, use, duplication or dissemination of the software and media is authorized only pursuant to a valid written license from Digital Equipment Corporation.