This fixes CVE-2022-23308. Also switch to GNOME as download source and xz tarball. Signed-off-by: Michael Heimpold <mhei@heimpold.de>