HP Support document

HP has made the following software updates and patches available to resolve the issue.

The patches are available from http://itrc.hp.com
while webupgrades can be downloaded from http://software.hp.com
The preliminary software updates can be downloaded via ftp from:

System: hprc.external.hp.com (192.170.19.100)
Login: sendmail
Password: sendmail (NOTE: CASE-sensitive)

ftp://sendmail:sendmail@hprc.external.hp.com
or
ftp://sendmail:sendmail@192.170.19.100

The webupgrades for sendmail 8.13.3 on B.11.11 as well as B.11.23 can be downloaded from http://software.hp.com using the URL above.
The cksum and md5 output for the preliminary depots are listed below.
The cksum and md5 output are also found the README.txt.pgp on the ftp site.

For sendmail 8.13.3, HP-UX B.11.23
sendmail -bs banner:
Sendmail version 8.13.3 - Revision 1.003 - 2006/05/24
what(1) string:
Sendmail version 8.13.3 - Revision 1.003 - 05/24/2006

For sendmail 8.13.3, HP-UX B.11.11
sendmail -bs banner:
Sendmail version 8.13.3 - Revision 2.004 - 2006/06/29
what(1) string:
Sendmail version 8.13.3 - Revision 2.004 - 06/29/2006

For sendmail 8.11.1, HP-UX B.11.23
Note: If UNOF_INET31734_1.depot or UNOF_INET31734_3.depot or UNOF_INET31734_4.depot has been installed, they must be removed using swremove(1M) before installing PHNE_35485 or subsequent.

For sendmail 8.11.1, HP-UX B.11.11
sendmail-811_10.depot
cksum 3720753575 2949120
md5 01f5e7c1a67c0b0a1103abdaa2907f21
sendmail -bs banner:
Sendmail 8.11.1 (Revision 1.10)
what(1) string:
version.c 8.11.1 (Berkeley) - (Revision 1.10) - 17th July 2006

For sendmail 8.11.1, HP-UX B.11.00
sendmail -bs banner:
Sendmail 8.11.1 - (Revision 1.09)
what(1) string:
version.c 8.11.1 (Berkeley) - (Revision 1.09) - 4th July 2006

For sendmail 8.9.3, HP-UX B.11.11
If UNOF_INET_29774_3.depot or previous is installed, remove it using swremove(1M). Then install:
->PHNE_35484 or subsequent

For sendmail 8.9.3, HP-UX B.11.00
If UNOF_INET_29772_3.depot or previous is installed, remove it using swremove(1M). Then install:
->PHNE_35483 or subsequent

For sendmail 8.9.3, HP-UX B.11.04
If UNOF_INET_29772_3.depot or previous is installed, remove it using swremove(1M). Then install:
PHNE_34927 or subsequent
sendmail -bs banner:
Sendmail 8.9.3 (PHNE_32006)/8.9.3; Fri, 7 Jul 2006
what(1) string:
version.c 8.9.3.1 (Berkeley) 11/05/2006 (PHNE_32006)
Special Installation Instructions - Note: sendmail is not supported in daemon mode on VVOS platforms. It is provided as a mailing agent (outbound) only.

For sendmail 8.8.6, HP-UX B.11.00
If UNOF_INET_29772_3.depot or previous is installed, remove it using swremove(1M). Then install:
->PHNE_35484 or subsequent
->Note: PHNE_35484 or subsequent upgrades sendmail 8.8.6 to sendmail 8.9.3.


For all versions of sendmail:

->If PHNE_35483, PHNE_35484, PHNE_35485 or subsequent is not installed,
modify sendmail.cf to add 'restrictqrun' to the PrivacyOptions.

After installation, verify output of what /usr/sbin/sendmail.
To check if installations are running sendmail 8.8.6 execute "what /usr/sbin/sendmail"
and check the version string.

MANUAL ACTIONS: Yes - NonUpdate
->If PHNE_35483, PHNE_35484, PHNE_35485 or subsequent is not installed,
modify /etc/mail/sendmail.cf to add 'restrictqrun' to the PrivacyOptions
HP-UX B.11.11 - install preliminary software
HP-UX B.11.23 - install preliminary software


PRODUCT SPECIFIC INFORMATION
HP-UX Security Patch Check: Security Patch Check revision B.02.00 analyzes all HP-issued Security Bulletins to provide a subset of recommended actions that potentially affect a specific HP-UX system. For more information: http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6834AA

HISTORY:
Version: 1 (rev.1) - 25 March 2006 Initial release
Version: 2 (rev.2) - 30 March 2006 updated md5 / cksum output
Version: 3 (rev.3) - 04 April 2006 updated B.11.23 depot, added 8.11.1 for B.11.23 depot
Version: 4 (rev.4) - 07 April 2006 added 8.9.3 depot for B.11.11
Version: 5 (rev.5) - 10 April 2006 clarified affected versions
Version: 6 (rev.6) - 12 April 2006 added 8.9.3 and 8.11.1 depots for B.11.00
Version: 7 (rev.7) - 18 April 2006 added 8.11.1 upgrade for HP-UX B.11.11
Version: 8 (rev.8) - 24 April 2006 replaced 8.9.3 depot for HP-UX B.11.00 and B.11.11
Version: 9 (rev.9) - 25 April 2006 added manual actions
Version: 10 (rev.10) - 03 May 2006 replaced 8.9.3 depot for HP-UX B.11.00 and B.11.11, added 8.11.1 depot for B.11.00
Version: 11 (rev.11) - 18 May 2006 sendmail 8.11.1 replacements UNOF_INET31734_4, sendmail-811_01.008 depot, and sendmail-811_09.depot, sendmail 8.9.3 new PHNE_31917, sendmail 8.8.6, sendmail 8.9.3 new PHNE_32006
Version: 12 (rev.12) - 18 July 2006 added webupgrades for 8.11.1 on B.11.00, and 8.13.3 on B.11.11; added patch for B.11.04.
Version: 13 (rev.13) - 31 July 2006 added PHNE_34900 for 8.9.3 on B.11.00, PHNE_34936 for 8.9.3 on B.11.11, PHNE_34689 for 8.11.1 on B.11.23, sendmail-811_01.009, sendmail-811_10.depot.
Version: 14 (rev.14) - 08 August 2006 corrected typo on 8.11.1 on B.11.23,
Version: 15 (rev.15) 21 August 2007 PHNE_35483, PHNE_35484, PHNE_35485 automate previous manual actions