-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 16 Nov 2023 12:23:11 +0100 Source: webkit2gtk Architecture: source Version: 2.42.2-1~deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Changes: webkit2gtk (2.42.2-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. - Fixes CVE-2023-41983 and CVE-2023-42852. * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. * debian/control.in: - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev. - Remove build dependency on libjxl-dev. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). Checksums-Sha1: 4b333021e9dbb27b618e214af41762ceaec9958e 4007 webkit2gtk_2.42.2-1~deb11u1.dsc 8ce80671329f791e57f2753f65d322194a61a7c7 87152 webkit2gtk_2.42.2-1~deb11u1.debian.tar.xz 2b3c837f45793991551eb8a0c6f05395cfba8e69 15435 webkit2gtk_2.42.2-1~deb11u1_source.buildinfo Checksums-Sha256: 47942440a6fd0228834590834257e0d8d429628bfc343a5f3b901af33f932ab4 4007 webkit2gtk_2.42.2-1~deb11u1.dsc f99b6501ae842d9df9361de307f8713ae188d9effe8bb065dc9599dfdbdd5624 87152 webkit2gtk_2.42.2-1~deb11u1.debian.tar.xz 89457d42498e6a7b0f762cfd6edb42102334860d6430559c05ca4de34cb82815 15435 webkit2gtk_2.42.2-1~deb11u1_source.buildinfo Files: 851e8d9b7e1da5524738c78d4bb598a8 4007 web optional webkit2gtk_2.42.2-1~deb11u1.dsc 8390ea4c7363666eba3bdc3e6c70e370 87152 web optional webkit2gtk_2.42.2-1~deb11u1.debian.tar.xz d68e0bbfc9f614c9e72acd3b34be38e7 15435 web optional webkit2gtk_2.42.2-1~deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAmVWCZAACgkQAAyEYu0C 2AK3oQ//U/3hxNGSWBjGQ1a+ZXoNDSFsriVVj5tfCIlYBLuYgajRlaHv1y6alwET UdAJmGXZVsEqb8UbZhFQPqb281GS9m+BVlAauFvRSIVRxXc5DclPqkBjc1XfIOfQ aGM13zKmci9KjPAksCL7GaWZBlFtQyzODgvxLgZ43f3vGw3sX8aAKmQvo+qrAo0z Uu6GHRJhBRxLjL6gPp4Qvt/3onMi5SZJgfeNwcOo0gE70041CSdZ6XCetDNNePpD zpp+0XMzISKCnmcDxPvcOz/RIKPm8RQdOY+cpq02B6hBefxbTi8mhyupsCIH2vG5 1/tb/CsPSNbKkKCeZgxO/YU+H0spck+pxxEWcSdhjKvyY220vl4kMNLCJF3yqPVq v7onsxsG6wnlJQjQxY7bLS9LDmmLyeXEGT871X9Q+X9EiXagnmcfuROg4DGghAuZ 1cIcKaJeuph34TYv4qHOrhtlSwFsemQWsgvu5ZLTpIdDD4UYWXnnWdf9JOw0rSiB hz3KWmHNbaiU8Q9AEeLrgxpq8bEFd0Idi8aUXOY44dONw80vKfSoI7PYlvuk4mA6 hKD5grJmDD4rM7mjfu+0Z/21JJK6MlLr0EBbXm+6cAG+ex9fIqofkRUfXesQQg+p RLk2oFTV+Ls0K44kKuFsPF8qCmS0IcMe5+2HYrqYPnx1eHgmgiw= =Eu01 -----END PGP SIGNATURE-----