Patch Name: PHNE_29912 Patch Description: s700_800 11.22 sendmail(1m) 8.11.1 patch Creation Date: 03/11/18 Post Date: 03/12/16 Hardware Platforms - OS Releases: s700: 11.22 s800: 11.22 Products: N/A Filesets: InternetSrvcs.INETSVCS2-RUN,fr=B.11.22,fa=HP-UX_B.11.22_IA,v=HP InternetSrvcs.INETSVCS-RUN,fr=B.11.22,fa=HP-UX_B.11.22_IA/PA,v=HP InternetSrvcs.INET-ENG-A-MAN,fr=B.11.22,fa=HP-UX_B.11.22_IA/PA,v=HP Automatic Reboot?: No Status: General Release Critical: No Category Tags: defect_repair general_release Path Name: /hp-ux_patches/s700_800/11.X/PHNE_29912 Symptoms: PHNE_29912: SR 8606330618 / CR JAGae91741: 1. Under some circumstances, Sendmail does not parse the headers properly. SR 8606331548 / CR JAGae92668: 2. Under certain circumstances, Sendmail does not parse some rulesets properly. PHNE_28409: SR 8606281277/JAGae45221 1. Sendmail does not log the transient error message, "Name server timeout" in the log file while processing the mail queue. SR 8606280837/JAGae44804 2. Under certain conditions, Sendmail does not terminate/restart properly. SR 8606291119/JAGae54962 3. Under certain conditions, Sendmail does not process the mail queue properly. SR 8606304587/JAGae67929 4. In some cases, Sendmail does not parse the headers properly. SR 8606295553/JAGae59235 5. In some cases, Sendmail does not parse the mail headers properly. SR 8606280818/JAGae44787 6. Under certain conditions, Sendmail or its associated utilities may not operate properly. SR 8606289625/JAGae53555 7. In some cases, smrsh(1m) does not operate properly. SR 8606303971/JAGae67321 8. In some cases, Sendmail allows improper relaying. SR 8606299235/JAGae62729 9. When the resolver retransmission timeout is set to a value greater than 20 seconds in the Sendmail configuration file /etc/mail/sendmail.cf, Sendmail fails to resolve the client host names. SR 8606293315/JAGae57065 10. When a name server transient error occurs, Sendmail instantly retries to resolve the host name. Defect Description: PHNE_29912: SR 8606330618 / CR JAGae91741: 1. Under some circumstances, Sendmail does not parse the headers properly. Resolution: Code has now been modified to fix the problem. SR 8606331548 / CR JAGae92668: 2. Under certain circumstances, Sendmail does not parse some rulesets properly. Resolution: Code has now been modified to fix the problem. PHNE_28409: SR 8606281277/JAGae45221 1. When Sendmail is unable to resolve the address of the host using the name service, a transient error "Name Server Timeout" occurs. This error is displayed on the terminal and is not logged in syslog file. The default syslog file is /var/adm/syslog/mail.log. Resolution: Sendmail now logs the transient error messages in the syslog file when the option "AlertTmpFailure" is enabled in the Sendmail configuration file /etc/mail/sendmail.cf. The error messages are logged as a LOG_ALERT message at Loglevel >=2, and contain the status information as specified below: stat= "Transient parse error -- message queued for future delivery" To enable this option in the Sendmail configuration file, perform the following steps: a) Use /usr/newconfig/etc/mail/sendmail.cf as the base Sendmail configuration file (/etc/mail/sendmail.cf) with site-specific changes as required. b) Edit "#O AlertTmpFailure=False" entry in the /etc/mail/sendmail.cf as follows: O AlertTmpFailure=True c) Restart the Sendmail daemon. SR 8606280837/JAGae44804 2. Due to a race condition, Sendmail does not terminate/restart properly. Resolution: Code has now been modified to fix the problem. SR 8606291119/JAGae54962 3. Under certain conditions, Sendmail does not process the mail queue properly. Resolution: Use /usr/newconfig/etc/mail/sendmail.cf as the base configuration file (/etc/mail/sendmail.cf) with site-specific changes as required and restart the Sendmail daemon. SR 8606304587/JAGae67929 4. In some cases, Sendmail does not parse the headers properly. Resolution: The code has been modified to parse the headers properly. SR 8606295553/JAGae59235 5. In some cases, Sendmail does not parse the mail headers properly. Resolution: The code has been modified to parse the mail headers properly. SR 8606280818/JAGae44787 6. Under certain conditions, Sendmail or its associated utilities may not operate properly. Resolution: Code has now been modified to fix the problem. SR 8606289625/JAGae53555 7. In some cases, smrsh(1m) does not operate properly. Resolution: Code has now been modified to fix the problem. SR 8606303971/JAGae67321 8. Due to specially quoted recipient addresses, Sendmail allows improper relaying. Resolution: A new ruleset has now been added in the /usr/newconfig/etc/mail/sendmail.cf file to remove the special quotes in the recipient address. Use /usr/newconfig/etc/mail/sendmail.cf as the base configuration file (/etc/mail/sendmail.cf) with site-specific changes as required and restart the Sendmail daemon. SR 8606299235/JAGae62729 9. Sendmail incorrectly sets resolver retry count to 0 when the resolver retransmission timeout is set to a value greater than 20 seconds. Resolution: Code has been modified to set the retry count to 1, when the resolver retransmission timeout is set to a value greater than 20 seconds. SR 8606293315/JAGae57065 10. Sendmail interprets name server transient error values in milliseconds instead of seconds. Due to this wrong interpretation of the timeout value, Sendmail retries to resolve the host name instantly. Resolution: Code has now been modified to interpret name server timeout values in seconds. Enhancement: No SR: 8606330618 8606331548 8606281277 8606280837 8606291119 8606304587 8606295553 8606280818 8606289625 8606303971 8606299235 8606293315 Patch Files: InternetSrvcs.INETSVCS2-RUN,fr=B.11.22,fa=HP-UX_B.11.22_IA, v=HP: /usr/sbin/sendmail /usr/sbin/makemap /usr/sbin/mailstats /usr/sbin/smrsh /usr/bin/praliases InternetSrvcs.INETSVCS-RUN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: /usr/newconfig/etc/mail/aliases /usr/sbin/killsm /usr/newconfig/etc/mail/convert_awk /usr/newconfig/etc/mail/cf/README /usr/newconfig/etc/mail/cf/cf/gen_cf /usr/newconfig/etc/mail/sendmail.cf /usr/newconfig/etc/mail/cf/m4/cfhead.m4 /usr/newconfig/etc/mail/cf/m4/proto.m4 InternetSrvcs.INET-ENG-A-MAN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: /usr/share/man/man1m.Z/sendmail.1m /usr/share/man/man1m.Z/killsm.1m /usr/share/man/man1.Z/mailstats.1 /usr/share/man/man1.Z/praliases.1 what(1) Output: InternetSrvcs.INETSVCS2-RUN,fr=B.11.22,fa=HP-UX_B.11.22_IA, v=HP: /usr/sbin/sendmail: University of California. All rights reserved. including Sendmail, Inc., and the Regents of the Copyright (c) 1998 HEWLETT PACKARD COMPANY and its l icensors, version.c 8.11.1 (Berkeley) - (PHNE_29912) - 19/11 /2003 HP-UX/General Millicode B.11.20.00 (IPF TOT): (MILLI - 05/01/01) /usr/sbin/makemap: makemap.c 8.135.4.11 (Berkeley) 05/05/2003 (PHNE_284 09) HP-UX/General Millicode B.11.20.00 (IPF TOT): (MILLI - 05/01/01) /usr/sbin/mailstats: mailstats.c 8.53.16.11 (Berkeley) 05/05/2003 (PHNE_2 8409) /usr/sbin/smrsh: smrsh.c 8.31.4.5 (Berkeley) 05/05/2003 (PHNE_28409) /usr/bin/praliases: praliases.c 8.59.4.10 (Berkeley) 05/05/2003 (PHNE_28 409) HP-UX/General Millicode B.11.20.00 (IPF TOT): (MILLI - 05/01/01) InternetSrvcs.INETSVCS-RUN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: /usr/newconfig/etc/mail/aliases: aliases $Revision: 1.1.212.1 $ $Date: 99/09/13 15:13 :16 $ /usr/sbin/killsm: 05/05/2003 PHNE_28409 /usr/newconfig/etc/mail/convert_awk: None /usr/newconfig/etc/mail/cf/README: None /usr/newconfig/etc/mail/cf/cf/gen_cf: None /usr/newconfig/etc/mail/sendmail.cf: cfhead.m4 8.76.4.13 (Berkeley) 05/05/2003 ### ## cf.m4 8.32 (Berkeley) 2001/07/16 ##### generic-hpux10.mc 8.11 (Berkeley) 2001/07/16 ##### hpux11.m4 8.1 (Berkeley) 2001/07/16 ##### generic.m4 8.15 (Berkeley) 2001/07/16 ##### redirect.m4 8.15 (Berkeley) 2001/07/16 ##### use_cw_file.m4 8.9 (Berkeley) 2001/07/16 ##### always_add_domain.m4 8.9 (Berkeley) 2001/07/16 # #### proto.m4 8.446.2.5.2.29 (Berkeley) 05/05/2003 ##### local.m4 8.50.16.2 (Berkeley) 2001/07/16 ### ## smtp.m4 8.56.2.1.2.3 (Berkeley) 2001/07/16 ##### uucp.m4 8.38 (Berkeley) 2001/07/16 ##### /usr/newconfig/etc/mail/cf/m4/cfhead.m4: cfhead.m4 8.76.4.13 (Berkeley) 05/05/2003') /usr/newconfig/etc/mail/cf/m4/proto.m4: proto.m4 8.446.2.5.2.29 (Berkeley) 05/05/2003 ') InternetSrvcs.INET-ENG-A-MAN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: /usr/share/man/man1m.Z/sendmail.1m: None /usr/share/man/man1m.Z/killsm.1m: None /usr/share/man/man1.Z/mailstats.1: None /usr/share/man/man1.Z/praliases.1: None cksum(1) Output: InternetSrvcs.INETSVCS2-RUN,fr=B.11.22,fa=HP-UX_B.11.22_IA, v=HP: 2317287386 2312468 /usr/sbin/sendmail 64206590 1033808 /usr/sbin/makemap 3851395572 20272 /usr/sbin/mailstats 3742113927 16036 /usr/sbin/smrsh 4113978029 1030032 /usr/bin/praliases InternetSrvcs.INETSVCS-RUN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: 1003701682 870 /usr/newconfig/etc/mail/aliases 3542390776 1191 /usr/sbin/killsm 848421388 2197 /usr/newconfig/etc/mail/convert_awk 1289403273 129635 /usr/newconfig/etc/mail/cf/README 2328392203 32722 /usr/newconfig/etc/mail/cf/cf/gen_cf 3563491284 100762 /usr/newconfig/etc/mail/sendmail.cf 23678029 55104 /usr/newconfig/etc/mail/cf/m4/cfhead.m4 3491630843 95283 /usr/newconfig/etc/mail/cf/m4/proto.m4 InternetSrvcs.INET-ENG-A-MAN,fr=B.11.22, fa=HP-UX_B.11.22_IA/PA,v=HP: 217235634 15074 /usr/share/man/man1m.Z/sendmail.1m 776513495 1068 /usr/share/man/man1m.Z/killsm.1m 3264046413 2626 /usr/share/man/man1.Z/mailstats.1 2657485999 1816 /usr/share/man/man1.Z/praliases.1 Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHNE_28409 Equivalent Patches: PHNE_29773: s700: 11.00 s800: 11.00 PHNE_29774: s700: 11.11 s800: 11.11 PHNE_29913: s700: 11.23 s800: 11.23 Patch Package Size: 2110 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHNE_29912 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHNE_29912.depot By default swinstall will archive the original software in /var/adm/sw/save/PHNE_29912. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHNE_29912.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHNE_29912.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHNE_29912.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: To comply with industry-standard sendmail(1M) practices, after the installation of PHNE_28409, or any superseding patch, the following behavior will be observed: 1. Non-root users will not be able to print system-wide sendmail aliases using the praliases(1) command. 2. Non-root users will not be able to print mail traffic statistics using the mailstats(1) command. 3. Non-root users will not be able to send signals to sendmail processes, even their own. 4. Sendmail reacts more appropriately to user signals, which may introduce some delay in terminating and restarting sendmail. 5. Sendmail and mailstats reports notification messages on any improper related files or databases. The behaviors one and two mentioned above may remain even after the removal of the patch. PHNE_28409 or its superseding patches deliver a new copy of the sendmail configuration file /etc/mail/sendmail.cf as /usr/newconfig/etc/mail/sendmail.cf. You need to merge your site-specific customizations with this new sendmail.cf file. Then, stop and start the sendmail daemon by using the following commands, respectively: /sbin/init.d/sendmail stop /sbin/init.d/sendmail start