<commit_before>%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\section{\label{sec:History-7-0}Stable Release Series 7.0}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

This is a stable release series of Condor.
It is based on the 6.9 development series.
All new features added or bugs fixed in the 6.9 series are available
in the 7.0 series.
As usual, only bug fixes (and potentially, ports to new platforms)
will be provided in future 7.0.x releases.
New features will be added in the 7.1.x development series.

The details of each version are described below.


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-0-6}Version 7.0.6}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item None.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item In some rare cases, the \Condor{startd} failed to fully preempt jobs.
The job itself was killed, but the \Condor{starter} process watching over
it would not be killed.  The slot would then stay in the Preempting state
indefinitely.

\end{itemize}

\noindent Known Bugs:

\begin{itemize}

\item None.

\end{itemize}

\noindent Additions and Changes to the Manual:

\begin{itemize}

\item None.

\end{itemize}



%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-0-5}Version 7.0.5}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item \Security This release fixes a security-related problem
  introduced in Condor versions 7.0.4 and 7.1.2.  It also fixes a
  related problem that affects all previous versions.  The problem
  affects Condor where the configuration specifies per-user
  authorization entries in the allow or deny lists which specify
  different, but overlapping net masks.  
  For example, \verb|*|, \verb|192.*|, and \verb|192.168.*|
  are overlapping net masks.  
  The consequence of the bug is that in a specific allow or deny list, if
  some users are entered with one net mask and other users are entered
  with a different but overlapping net mask, some entries would be
  ignored when enforcing the policy.  If the users are identical for
  both net masks, then there is no problem.  A similar problem in all
  previous versions of Condor affects configurations with per-user
  authorization entries having different, but overlapping host name
  patterns.  For example, \verb|*.edu|, \verb|*.wisc.edu|, and
  \verb|condor.wisc.edu| are overlapping host name patterns.  Some
  entries were effectively ignored, if a specific allow or deny list
  contained different users in different, but overlapping host name
  patterns.

\end{itemize}

\noindent New Features:

\begin{itemize}

\item Local universe jobs now go on hold for the same specific reasons that
vanilla jobs may go on hold.  Examples are missing input or executable files.
Previously, when local universe jobs failed in this manner,
the jobs returned to the idle state in the job queue,
repetitively attempting to run, 
and failing over and over until the job is removed.

\item Local universe jobs now have the ClassAd attribute \Attr{NumShadowStarts}.
Although local universe jobs do not have a \Condor{shadow} process, 
this attribute
is introduced to keep management of local universe as similar to
vanilla universe as possible.  For local universe jobs, this attribute
is identical to the attribute \Attr{JobRunCount}, 
which indicates how many times a
local \Condor{starter} process has been created to run the job.

\end{itemize}

\noindent Configuration Variable Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

% Fixed by Red Hat
\item Fixed a segmentation fault bug with \Condor{submit} \Opt{-dump} when
\Expr{universe=grid} or \Expr{x509userproxy=<anything>}.

\item Fixed a buffer overflow which could cause the Condor daemons and tools
to crash.<commit_msg>Added wording re the security bugs fixed. (cherry picked from commit <PASSWORD>)<commit_after>%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\section{\label{sec:History-7-0}Stable Release Series 7.0}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

This is a stable release series of Condor.
It is based on the 6.9 development series.
All new features added or bugs fixed in the 6.9 series are available
in the 7.0 series.
As usual, only bug fixes (and potentially, ports to new platforms)
will be provided in future 7.0.x releases.
New features will be added in the 7.1.x development series.

The details of each version are described below.


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-0-6}Version 7.0.6}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item None.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item In some rare cases, the \Condor{startd} failed to fully preempt jobs.
The job itself was killed, but the \Condor{starter} process watching over
it would not be killed.  The slot would then stay in the Preempting state
indefinitely.

\end{itemize}

\noindent Known Bugs:

\begin{itemize}

\item None.

\end{itemize}

\noindent Additions and Changes to the Manual:

\begin{itemize}

\item None.

\end{itemize}



%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-0-5}Version 7.0.5}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

This release contains many bug fixes and some improvements to error handling
of Local Universe jobs. Note that some of the bug fixes are
security-related; therefore, we recommend sites either upgrade Condor, or
restrict permissions on who is allowed to submit Condor jobs to trusted
users. Bug fixes that are security related are clearly marked in the Bugs
Fixed section below along with a description of the potential security
impact. The Condor Project believes in the full disclosure of information,
and therefore complete vulnerability details can be found at
\URL{http://www.cs.wisc.edu/condor/security/}. However, in order to give an
adequate upgrade window for production installations, we will delay posting
the full vulnerability details fixed in this release for 30 days (until the
week of November 3rd 2008). 


\noindent New Features:

\begin{itemize}

\item Local universe jobs now go on hold for the same specific reasons that
vanilla jobs may go on hold.  Examples are missing input or executable files.
Previously, when local universe jobs failed in this manner,
the jobs returned to the idle state in the job queue,
repetitively attempting to run, 
and failing over and over until the job is removed.

\item Local universe jobs now have the ClassAd attribute \Attr{NumShadowStarts}.
Although local universe jobs do not have a \Condor{shadow} process, 
this attribute
is introduced to keep management of local universe as similar to
vanilla universe as possible.  For local universe jobs, this attribute
is identical to the attribute \Attr{JobRunCount}, 
which indicates how many times a
local \Condor{starter} process has been created to run the job.

\end{itemize}

\noindent Configuration Variable Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item \Security A flaw was found in the way Condor processes user submitted
jobs. It is possible for a user who has permissions to submit jobs into
Condor to do so in a way that could cause that job to run as any other
non-root user. We have not had any reported incidents exploiting this
flaw. (CVE-2008-3826)

\item \Security A stack-based buffer overflow flaw was found in the
\Condor{schedd} daemon. A user who has permissions to submit a job could
do so in a manner that could cause the \Condor{schedd} to crash or,
potentially, execute arbitrary code on the submit machine with the
\Condor{schedd}'s identity. We are not aware of any known exploits for
this flaw. We have not had any reported incidents exploiting this flaw.
(CVE-2008-3828)

\item \Security A denial-of-service flaw was found in the \Condor{schedd} daemon. A user who has permissions to submit a job could do so in a manner that would cause \Condor{schedd} to crash. We have not had any reported incidents exploiting this flaw. (CVE-2008-3829)

\item \Security A flaw was found in the way Condor processes allow and deny netmasks for access control. If Condor's configuration file contained overlapping netmasks in the allow or deny rules, it could cause those rules to be ignored, potentially allowing unintended access to users in Condor's deny authorization lists. We have not had any reported incidents exploiting this flaw. (CVE-2008-3830) 

% Fixed by Red Hat
\item Fixed a segmentation fault bug with \Condor{submit} \Opt{-dump} when
\Expr{universe=grid} or \Expr{x509userproxy=<anything>}.

\item Fixed a buffer overflow which could cause the Condor daemons and tools
to crash.
{'fraction_non_alphanumeric': 0.1414141414141414, 'fraction_numerical': 0.010983622634108072, 'mean_word_length': 4.551442569406642, 'pattern_counts': {'":': 0, '<': 6, '<?xml version=': 0, '>': 6, 'https://': 0, 'lorem ipsum': 0, 'www.': 1, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4494307', 'n_tokens_mistral': 2871, 'n_tokens_neox': 2741, 'n_words': 1316}