webkit2gtk (2.42.2-1~deb11u1) bullseye-security; urgency=medium

webkit2gtk (2.42.2-1~deb11u1) bullseye-security; urgency=medium

  * Rebuild for bullseye-security.
    - Fixes CVE-2023-41983 and CVE-2023-42852.
  * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use
    clang instead. Keep using gcc in other architectures because clang has
    problems in at least i386, arm64 and mipsel (see #1010329 and
    #1016811).
    - debian/rules: Tell CMake to use clang.
    - debian/control.in: Build depend on clang.
  * Build libsoup2 packages only.
    - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and
      USE_PREBUILT_DOCS=YES.
    - debian/control.in: Remove build dependency on ccache.
  * debian/rules:
    - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL
      due to missing or additional build dependencies.
  * debian/control.in:
    - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev.
    - Remove build dependency on libjxl-dev.
  * debian/patches/disable-dmabuf.patch:
    - Disable the DMABuf renderer in all cases in bullseye
      (see #1054101).

[dgit import unpatched webkit2gtk 2.42.2-1~deb11u1]