-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 11 Dec 2023 13:32:06 +0100
Source: webkit2gtk
Architecture: source
Version: 2.42.3-1~deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org>
Changed-By: Alberto Garcia <berto@igalia.com>
Changes:
 webkit2gtk (2.42.3-1~deb11u1) bullseye-security; urgency=medium
 .
   * Rebuild for bullseye-security.
     - Fixes CVE-2023-42916 and CVE-2023-42917.
   * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use
     clang instead. Keep using gcc in other architectures because clang has
     problems in at least i386, arm64 and mipsel (see #1010329 and
     #1016811).
     - debian/rules: Tell CMake to use clang.
     - debian/control.in: Build depend on clang.
   * Build libsoup2 packages only.
     - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and
       USE_PREBUILT_DOCS=YES.
     - debian/control.in: Remove build dependency on ccache.
   * debian/rules:
     - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL
       due to missing or additional build dependencies.
   * debian/control.in:
     - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev.
     - Remove build dependency on libjxl-dev.
   * debian/patches/disable-dmabuf.patch:
     - Disable the DMABuf renderer in all cases in bullseye
       (see #1054101).
Checksums-Sha1:
 2b0b86a46d008b0ad99dc60c1cc9758bc52db558 3929 webkit2gtk_2.42.3-1~deb11u1.dsc
 1f07562f5009543f1d7427e28f2eff30d3ad15c5 32023120 webkit2gtk_2.42.3.orig.tar.xz
 afac16f62e893a774eb061f3290024443e254b56 195 webkit2gtk_2.42.3.orig.tar.xz.asc
 32d2cc3ba5aaefdf0156acc0074b7b9435167065 85512 webkit2gtk_2.42.3-1~deb11u1.debian.tar.xz
 e0dc50110d9280f54b35f04e71c047ee1b16cebf 15467 webkit2gtk_2.42.3-1~deb11u1_source.buildinfo
Checksums-Sha256:
 0512c8f9a1db616eb313279aebda4c5e17265c5b1e7bf349fabfe7cc5a149173 3929 webkit2gtk_2.42.3-1~deb11u1.dsc
 0a1a4630045628b3a6fe95da72dc47852cff20d66be1ac6fd0d669c88c13d8e2 32023120 webkit2gtk_2.42.3.orig.tar.xz
 350b80ec3e4adccdd0d154916f05b5b1bd793af7432d086f57e52eed03ca71d5 195 webkit2gtk_2.42.3.orig.tar.xz.asc
 6ef0d0d0df6118ea70fe8b4cdc6b811348d7de2308b8a7efa8628313aaaa7d1e 85512 webkit2gtk_2.42.3-1~deb11u1.debian.tar.xz
 74023b566e3f5d7f50e73d7e6a5ea2f5a80e9207d089a9707c848893381336e8 15467 webkit2gtk_2.42.3-1~deb11u1_source.buildinfo
Files:
 6fec79088aebad234786b9ccd36e3284 3929 web optional webkit2gtk_2.42.3-1~deb11u1.dsc
 de1b3611ee738a4173abb5e897bc09e3 32023120 web optional webkit2gtk_2.42.3.orig.tar.xz
 0dd699049cef704b6ee9fbaf9048695a 195 web optional webkit2gtk_2.42.3.orig.tar.xz.asc
 fa071086f70e783684668902cec5a00a 85512 web optional webkit2gtk_2.42.3-1~deb11u1.debian.tar.xz
 bd7f98f4d1070113f59c051cca8d84bd 15467 web optional webkit2gtk_2.42.3-1~deb11u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+3Jy
-----END PGP SIGNATURE-----