<commit_before>%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\section{\label{sec:History-7-8}Stable Release Series 7.8}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

This is a stable release series of Condor.
As usual, only bug fixes (and potentially, ports to new platforms)
will be provided in future 7.8.x releases.
New features will be added in the 7.9.x development series.

The details of each version are described below.

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-8-5}Version 7.8.5}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item Condor version 7.8.5 not yet released.
%\item Condor version 7.8.5 released on Month Date, 2012.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable and ClassAd Attribute Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item None.

\end{itemize}

\noindent Known Bugs:

\begin{itemize}

\item None.

\end{itemize}

\noindent Additions and Changes to the Manual:

\begin{itemize}

\item None.

\end{itemize}


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-8-4}Version 7.8.4}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item Condor version 7.8.4 released on September 19, 2012.

\item This release contains several important security fixes and all users should upgrade as soon as possible.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable and ClassAd Attribute Additions and Changes:

\begin{itemize}

\item The new configuration variable \Macro{GSI\_AUTHZ\_CONF}
fixes a bug in which an instance of Condor may utilize the  
wrong Globus mapping.
The configuration variable defines a path and file name 
to the file that contains the Globus mapping library. 
See the complete definition at
~\ref{param:GSIAuthzConf}.
\Ticket{2103}


\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item \Security Although not user-visible, there were multiple updates to remove places
in the code where potential buffer overruns could occur, thus removing
potential attacks.  None were known to be exploitable.

\item \Security Although not user-visible, there were updates to the code to improve
error checking of system calls, removing some potential security threats.  None
were known to be exploitable.

\item \Security Although not user-visible, some code that was no longer used was removed.
The presence of this code could have lead to a Denial-of-Service attack which
would allow an attacker to stop another user's jobs from running.

\item \Security Filesystem (FS) authentication was improved to check the UNIX permissions
of the directory used for authentication.  Without this, an attacker may have
been able to impersonate another submitter on the same submit machine.

\item Fixed the \Condor{schedd} daemon; 
it would crash when a submit description file
contained a malformed \verb@$$()@ expansion macro that contained
a period.
\Ticket{3216}

\item Fixed a case in which a daemon could crash and leave behind a log
file owned by \Login{root}.  This \Login{root}-owned file would then cause
subsequent attempts to restart the daemon to fail.
\Ticket{2894}

\item Fixed a special case bug in which configuration variables
defined utilizing initial substrings of \Expr{\$(DOLLAR)},
for example  \Expr{\$(D)} and  \Expr{\$(DO)},  
were not expanded properly.
\Ticket{3217}

\item The command \Condor{q} \Opt{-run} now displays correct HOST field 
information for local universe jobs.
\Ticket{3150}

\end{itemize}

\noindent Known Bugs:
<commit_msg>clarify 7.8 version history and update with CVEs<commit_after>%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!
%%%      PLEASE RUN A SPELL CHECKER BEFORE COMMITTING YOUR CHANGES!

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\section{\label{sec:History-7-8}Stable Release Series 7.8}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

This is a stable release series of Condor.
As usual, only bug fixes (and potentially, ports to new platforms)
will be provided in future 7.8.x releases.
New features will be added in the 7.9.x development series.

The details of each version are described below.

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-8-5}Version 7.8.5}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item Condor version 7.8.5 not yet released.
%\item Condor version 7.8.5 released on Month Date, 2012.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable and ClassAd Attribute Additions and Changes:

\begin{itemize}

\item None.

\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item None.

\end{itemize}

\noindent Known Bugs:

\begin{itemize}

\item None.

\end{itemize}

\noindent Additions and Changes to the Manual:

\begin{itemize}

\item None.

\end{itemize}


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\subsection*{\label{sec:New-7-8-4}Version 7.8.4}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

\noindent Release Notes:

\begin{itemize}

\item Condor version 7.8.4 released on September 19, 2012.

\item This release contains several important security fixes and all users should upgrade as soon as possible.

\end{itemize}


\noindent New Features:

\begin{itemize}

\item None.

\end{itemize}

\noindent Configuration Variable and ClassAd Attribute Additions and Changes:

\begin{itemize}

\item The new configuration variable \Macro{GSI\_AUTHZ\_CONF}
fixes a bug in which an instance of Condor may utilize the  
wrong Globus mapping.
The configuration variable defines a path and file name 
to the file that contains the Globus mapping library. 
See the complete definition at
~\ref{param:GSIAuthzConf}.
\Ticket{2103}


\end{itemize}

\noindent Bugs Fixed:

\begin{itemize}

\item \Security Some code that was no longer used was removed.  The presence
of this code could expose information which would allow an attacker to control
another user's job.  (CVE-2012-3493)

\item \Security Some code that was no longer used was removed.  The presence
of this code could have lead to a Denial-of-Service attack which would allow
an attacker to remove another user's idle job.  (CVE-2012-3491)

\item \Security Filesystem (FS) authentication was improved to check the UNIX
permissions of the directory used for authentication.  Without this, an
attacker may have been able to impersonate another submitter on the same submit
machine.  (CVE-2012-3492)

\item \Security Although not user-visible, there were multiple updates to
remove places in the code where potential buffer overruns could occur, thus
removing potential attacks.  None were known to be exploitable.

\item \Security Although not user-visible, there were updates to the code to
improve error checking of system calls, removing some potential security
threats.  None were known to be exploitable.


% https://access.redhat.com/security/cve/CVE-2012-349X


\item Fixed the \Condor{schedd} daemon; 
it would crash when a submit description file
contained a malformed \verb@$$()@ expansion macro that contained
a period.
\Ticket{3216}

\item Fixed a case in which a daemon could crash and leave behind a log
file owned by \Login{root}.  This \Login{root}-owned file would then cause
subsequent attempts to restart the daemon to fail.
\Ticket{2894}

\item Fixed a special case bug in which configuration variables
defined utilizing initial substrings of \Expr{\$(DOLLAR)},
for example  \Expr{\$(D)} and  \Expr{\$(DO)},  
were not expanded properly.
\Ticket{3217}

\item The command \Condor{q} \Opt{-run} now displays correct HOST field 
information for local universe jobs.
\Ticket{3150}

\end{itemize}

\noindent Known Bugs:

{'fraction_non_alphanumeric': 0.16685675182481752, 'fraction_numerical': 0.017221715328467155, 'mean_word_length': 4.613956466069142, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 1, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '651945', 'n_tokens_mistral': 2613, 'n_tokens_neox': 2483, 'n_words': 1036}