ALT Linux Bugzilla – #51613

thunderbird-128.3.0-alt1 -> sisyphus:

 Thu Oct 03 2024 Ajrat Makhmutov <rauty@altlinux> 128.3.0-alt1
 - New version.
 - Add the WM_CLASS setting directly in the app launcher (closes: 51613).
 - Security fixes:
   + CVE-2024-9392: Compromised content process can bypass site isolation
   + CVE-2024-9393: Cross-origin access to PDF contents through multipart responses
   + CVE-2024-9394: Cross-origin access to JSON contents through multipart responses
   + CVE-2024-8900: Clipboard write permission bypass
   + CVE-2024-9396: Potential memory corruption may occur when cloning certain objects
   + CVE-2024-9397: Potential directory upload bypass via clickjacking
   + CVE-2024-9398: External protocol handlers could be enumerated via popups
   + CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of service
   + CVE-2024-9400: Potential memory corruption during JIT compilation
   + CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
   + CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

Переоткрываю ошибку, т.к. иконка Wayland продолжает отображаться в правом углу окон thunderbird

Версия пакета:
thunderbird-128.2.3-alt1

Платформы обновленные до Sisyphus:
ALT Education 11.0-x86_64-kde
ALT KWorkstation 11.0

Шаги к воспроизведению:
1) Запустить thunderbird
2) Настроить учетную запись почты
3) Создать Новое сообщение/Создать новый календарь на вкладке календарь

Ожидаемый результат:В правом верхнем углу открываемых окон thunderbird отображается соответствующая иконка 

Реальный результат: В правом верхнем углу открываемых окон thunderbird отображается иконка Wayland (См. скриншот)

Created attachment 17011 [details]
Новое сообщение Kwork

Created attachment 17012 [details]
Новое соообщение Workstation

Created attachment 17013 [details]
Новый календарь Workstation

Created attachment 17014 [details]
Новый календарь Kwork

thunderbird-128.3.0-alt1 -> p11:

 Thu Oct 03 2024 Ajrat Makhmutov <rauty@altlinux> 128.3.0-alt1
 - New version.
 - Add the WM_CLASS setting directly in the app launcher (closes: 51613).
 - Security fixes:
   + CVE-2024-9392: Compromised content process can bypass site isolation
   + CVE-2024-9393: Cross-origin access to PDF contents through multipart responses
   + CVE-2024-9394: Cross-origin access to JSON contents through multipart responses
   + CVE-2024-8900: Clipboard write permission bypass
   + CVE-2024-9396: Potential memory corruption may occur when cloning certain objects
   + CVE-2024-9397: Potential directory upload bypass via clickjacking
   + CVE-2024-9398: External protocol handlers could be enumerated via popups
   + CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of service
   + CVE-2024-9400: Potential memory corruption during JIT compilation
   + CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
   + CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3
 Sat Sep 21 2024 Ajrat Makhmutov <rauty@altlinux> 128.2.3-alt1
 - New version.
 Thu Sep 19 2024 Ajrat Makhmutov <rauty@altlinux> 128.2.2-alt1
 - New version.
 Tue Sep 17 2024 Ajrat Makhmutov <rauty@altlinux> 128.2.1-alt1
 - New version.
 Sat Sep 07 2024 Ajrat Makhmutov <rauty@altlinux> 128.2.0-alt1
 - New version.
 - Security fixes:
   + CVE-2024-8394: Crash when aborting verification of OTR chat
   + CVE-2024-8385: WASM type confusion involving ArrayTypes
   + CVE-2024-8381: Type confusion when looking up a property name in a "with" block
   + CVE-2024-8382: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran
   + CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in OOM conditions
   + CVE-2024-8386: SelectElements could be shown over another site if popups are allowed
   + CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2
 Thu Aug 22 2024 Ajrat Makhmutov <rauty@altlinux> 128.1.1-alt1
 - New version.
 Wed Aug 07 2024 Ajrat Makhmutov <rauty@altlinux> 128.1.0-alt1
 - New version.
 - Security fixes:
   + CVE-2024-7518: Fullscreen notification dialog can be obscured by document content
   + CVE-2024-7519: Out of bounds memory access in graphics shared memory handling
   + CVE-2024-7520: Type confusion in WebAssembly
   + CVE-2024-7521: Incomplete WebAssembly exception handing
   + CVE-2024-7522: Out of bounds read in editor component
   + CVE-2024-7525: Missing permission check when creating a StreamFilter
   + CVE-2024-7526: Uninitialized memory used by WebGL
   + CVE-2024-7527: Use-after-free in JavaScript garbage collection
   + CVE-2024-7528: Use-after-free in IndexedDB
   + CVE-2024-7529: Document content could partially obscure security prompts
 Tue Jul 23 2024 Ajrat Makhmutov <rauty@altlinux> 128.0.1-alt1
 - New version.
 Mon Jul 22 2024 Ajrat Makhmutov <rauty@altlinux> 128.0-alt2
 - Merge thunderbird-wayland to thunderbird.
 - Enforce window name to associate icon and title with window.
 Fri Jul 19 2024 Ajrat Makhmutov <rauty@altlinux> 128.0-alt1
 - New version.
 - Security fixes:
   + CVE-2024-3852: GetBoundName in the JIT returned the wrong object
   + CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement
   + CVE-2024-3857: Incorrect JITting of arguments led to use-after-free during garbage collection
   + CVE-2024-2609: Permission prompt input delay could expire when not in focus
   + CVE-2024-3859: Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
   + CVE-2024-3861: Potential use-after-free due to AlignedBuffer self-move
   + CVE-2024-3863: Download Protections were bypassed by .xrm-ms files on Windows
   + CVE-2024-3302: Denial of Service using HTTP/2 CONTINUATION frames
   + CVE-2024-3864: Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10
   + CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
   + CVE-2024-4767: IndexedDB files retained in private browsing mode
   + CVE-2024-4768: Potential permissions request bypass via clickjacking
   + CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types
   + CVE-2024-4770: Use-after-free could occur when printing to PDF
   + CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11
   + CVE-2024-5702: Use-after-free in networking
   + CVE-2024-5688: Use-after-free in JavaScript object transplant
   + CVE-2024-5690: External protocol handlers leaked by timing attack
   + CVE-2024-5691: Sandboxed iframes were able to bypass sandbox restrictions to open a new window
   + CVE-2024-5692: Bypass of file name restrictions during saving
   + CVE-2024-5693: Cross-Origin Image leak via Offscreen Canvas
   + CVE-2024-5696: Memory Corruption in Text Fragments
   + CVE-2024-5700: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12
   + CVE-2024-6606: Out-of-bounds read in clipboard component
   + CVE-2024-6607: Leaving pointerlock by pressing the escape key could be prevented
   + CVE-2024-6608: Cursor could be moved out of the viewport using pointerlock.
   + CVE-2024-6609: Memory corruption in NSS
   + CVE-2024-6610: Form validation popups could block exiting full-screen mode
   + CVE-2024-6600: Memory corruption in WebGL API
   + CVE-2024-6601: Race condition in permission assignment
   + CVE-2024-6602: Memory corruption in NSS
   + CVE-2024-6603: Memory corruption in thread creation
   + CVE-2024-6611: Incorrect handling of SameSite cookies
   + CVE-2024-6612: CSP violation leakage when using devtools
   + CVE-2024-6613: Incorrect listing of stack frames
   + CVE-2024-6614: Incorrect listing of stack frames
   + CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13
   + CVE-2024-6615: Memory safety bugs fixed in Firefox 128 and Thunderbird 128