Your message dated Mon, 13 Feb 2017 19:08:52 +0000
with message-id <[email protected]>
and subject line Bug#855048: fixed in qgis 2.14.11+dfsg-2
has caused the Debian Bug report #855048,
regarding qgis: Ships an unsupported copy of QtWebkit in public Python path 
without any transition
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
855048: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855048
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: qgis
Version: 2.14.11+dfsg-1
Severity: serious
Tags: security
User: [email protected]
Usertags: origin-kali

python-qt4 dropped support for QtWebkit it's because it was not
possible to provide security support for it (cf #784514). You disabled
that support in response to that bug.

But later you decided to re-enable it using an embedded copy, the net
result is that python-qgis is now shipping files that used to be
shipped by python-qt4:
/usr/lib/python2.7/dist-packages/PyQt4/QtWebKit.x86_64-linux-gnu.so

There are two problems:

1/ the upgrade is not safe, you can have conflicts with python-qt4 if
python-qgis is upgraded before python-qt4 (even more likely in Kali
where we kept QtWebkit a while longer in python-qt4)

2/ if QtWebkit cannot be suppported in python-qt4, it also cannot be
supported in python-qgis

IMO you should disable that embedded copy usage or at least get a prior
ack from the security team.

Cheers,

-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

--- End Message ---
--- Begin Message ---
Source: qgis
Source-Version: 2.14.11+dfsg-2

We believe that the bug you reported is fixed in the latest version of
qgis, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bas Couwenberg <[email protected]> (supplier of updated qgis package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 13 Feb 2017 18:43:07 +0100
Source: qgis
Binary: qgis qgis-common libqgis-app2.14.11 libqgis-core2.14.11 
libqgis-gui2.14.11 libqgis-analysis2.14.11 libqgis-networkanalysis2.14.11 
libqgisgrass7-2.14.11 libqgispython2.14.11 libqgis-customwidgets 
libqgis-server2.14.11 libqgis-dev qgis-dbg qgis-provider-grass 
qgis-plugin-grass qgis-plugin-grass-common python-qgis python-qgis-common 
qgis-providers qgis-providers-common qgis-server qgis-api-doc
Architecture: source amd64 all
Version: 2.14.11+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <[email protected]>
Changed-By: Bas Couwenberg <[email protected]>
Description:
 libqgis-analysis2.14.11 - QGIS - shared analysis library
 libqgis-app2.14.11 - QGIS - shared app library
 libqgis-core2.14.11 - QGIS - shared core library
 libqgis-customwidgets - QGIS custom widgets for Qt Designer
 libqgis-dev - QGIS - development files
 libqgis-gui2.14.11 - QGIS - shared gui library
 libqgis-networkanalysis2.14.11 - QGIS - shared network analysis library
 libqgis-server2.14.11 - QGIS - shared server library
 libqgisgrass7-2.14.11 - QGIS - shared grass library
 libqgispython2.14.11 - QGIS - shared Python library
 python-qgis - Python bindings to QGIS
 python-qgis-common - Python bindings to QGIS - architecture-independent files
 qgis       - Geographic Information System (GIS)
 qgis-api-doc - QGIS API documentation
 qgis-common - QGIS - architecture-independent data
 qgis-dbg   - QGIS - debugging symbols
 qgis-plugin-grass - GRASS plugin for QGIS
 qgis-plugin-grass-common - GRASS plugin for QGIS - architecture-independent 
data
 qgis-provider-grass - GRASS provider for QGIS
 qgis-providers - collection of data providers to QGIS
 qgis-providers-common - collection of data providers to QGIS - 
architecture-independent f
 qgis-server - QGIS server providing various OGC services
Closes: 855048
Changes:
 qgis (2.14.11+dfsg-2) unstable; urgency=medium
 .
   * Add Breaks/Replaces on python-qt4 for QtWebKit.
     (closes: #855048)
Checksums-Sha1:
 653aa73807620f70d511af57423fc153b5a72fce 4365 qgis_2.14.11+dfsg-2.dsc
 399d96609f1eb9a191d805abdcde1154fd125022 1329372 
qgis_2.14.11+dfsg-2.debian.tar.xz
 c1ce6e580370df8c517479e087d5518249173ad8 1327582 
libqgis-analysis2.14.11_2.14.11+dfsg-2_amd64.deb
 9c429903c91e97c4a94428416f9719f7730dd4aa 3117498 
libqgis-app2.14.11_2.14.11+dfsg-2_amd64.deb
 670bb4040a69d54e1cad1c5096f0198700400eea 3928764 
libqgis-core2.14.11_2.14.11+dfsg-2_amd64.deb
 8b6ac8dcd59795c1170c94d69cbd48f354b5dbaa 2705308 
libqgis-customwidgets_2.14.11+dfsg-2_amd64.deb
 562fad18fbf33a147dffa52ba6865e2815a24e52 1728636 
libqgis-dev_2.14.11+dfsg-2_amd64.deb
 6152910e7ad30a929277a07128d016c9ac787a6c 2951410 
libqgis-gui2.14.11_2.14.11+dfsg-2_amd64.deb
 f98cd1dd06e61078de965b7dbceacd35c2c31a87 1188932 
libqgis-networkanalysis2.14.11_2.14.11+dfsg-2_amd64.deb
 628257ca5132de3fa722c1b3f64478d385dc2e9a 1534498 
libqgis-server2.14.11_2.14.11+dfsg-2_amd64.deb
 a4360f1a1b3244112036594d0992e3490eb14a2e 1363172 
libqgisgrass7-2.14.11_2.14.11+dfsg-2_amd64.deb
 dc61f74ac7b51aa2340520a467c710329f4b87f5 1184828 
libqgispython2.14.11_2.14.11+dfsg-2_amd64.deb
 445bf337175f7767870d9dd65b586cbe08db5755 3642686 
python-qgis-common_2.14.11+dfsg-2_all.deb
 287b3d533869aef921a472e6a4d5f57e7d944375 4551822 
python-qgis_2.14.11+dfsg-2_amd64.deb
 1bdb42cb0c6d0ba4970f15bc9e575bf4d00bf447 162317906 
qgis-api-doc_2.14.11+dfsg-2_all.deb
 825c766258984bee9559da70d5481fb4f7cabc07 10163472 
qgis-common_2.14.11+dfsg-2_all.deb
 e738b0711c19cbc34a634c5b990c7d877332256b 212047906 
qgis-dbg_2.14.11+dfsg-2_amd64.deb
 c7ffabd9f12d020ebb0dc10f32dc4ba97d7cd4a1 1642796 
qgis-plugin-grass-common_2.14.11+dfsg-2_all.deb
 61ab20dcb6257cc324150773ffd1e6a24768e646 1731998 
qgis-plugin-grass_2.14.11+dfsg-2_amd64.deb
 db31ee5ec34bf4b29e2b6007685af1a800f2c89e 1230056 
qgis-provider-grass_2.14.11+dfsg-2_amd64.deb
 568a63d19ae79ea3d6c03b0f5fddc09f3ed566e8 1928080 
qgis-providers-common_2.14.11+dfsg-2_all.deb
 ef0357a23f07d36539759b796f6ae76d2de8616c 2324458 
qgis-providers_2.14.11+dfsg-2_amd64.deb
 5ffcb05174174fabc6dd474a9bc7b88ef243d5b9 1634694 
qgis-server_2.14.11+dfsg-2_amd64.deb
 88c2825be848fecf29668f9eb50e3d36cfe9976c 27639 
qgis_2.14.11+dfsg-2_amd64.buildinfo
 218ae50558a92a4abf244ef546e9d31806337ee1 4784266 qgis_2.14.11+dfsg-2_amd64.deb
Checksums-Sha256:
 ef1ef4ac19f6720796f3ab21b28a92ef2b982fc556b3340668265ba9971910a1 4365 
qgis_2.14.11+dfsg-2.dsc
 2842f2a00b03849c4d9518691be4340644217c606f3d89b530cfac2240615bf8 1329372 
qgis_2.14.11+dfsg-2.debian.tar.xz
 f5c90b822bf7dd852354f787d92a144fff798b3397430def3e1dd46f7488c3f8 1327582 
libqgis-analysis2.14.11_2.14.11+dfsg-2_amd64.deb
 f9dc288ea21db812ed46fcad7531f9f772d95f0b5990057eaf51d35b724e6f0c 3117498 
libqgis-app2.14.11_2.14.11+dfsg-2_amd64.deb
 5466122470c10b6ab1931599b2a60e9813761186e5c0828c1828502614414ce6 3928764 
libqgis-core2.14.11_2.14.11+dfsg-2_amd64.deb
 d3a80600ca1da10439008fa1fc4584cd80f869426ebce3a3f65cfbb98a4d9822 2705308 
libqgis-customwidgets_2.14.11+dfsg-2_amd64.deb
 5f5326019c4259ab8c4b5af10ec2eda5e82199b20824995808855727fe98107e 1728636 
libqgis-dev_2.14.11+dfsg-2_amd64.deb
 d5477daf49db372072d92bd17f7cb0104fd4e7ab8e703fbd954ed3b9f8fdb255 2951410 
libqgis-gui2.14.11_2.14.11+dfsg-2_amd64.deb
 300f997ed741098fe0b7019ea87e926b27b900ad756db2b0d51e54559cb8831a 1188932 
libqgis-networkanalysis2.14.11_2.14.11+dfsg-2_amd64.deb
 4c48dafcadb91fd451ef817bfe264f73ac7851805e45a494039aea0799e5b78e 1534498 
libqgis-server2.14.11_2.14.11+dfsg-2_amd64.deb
 b252a0c8cad34adee525c2f0aa8ca3092b95579dbc44fbbcab8f555338012b73 1363172 
libqgisgrass7-2.14.11_2.14.11+dfsg-2_amd64.deb
 6fa03ce379bea182427a14397cd8ec638069a6e6d3b9f63b54b8c273ddec8e67 1184828 
libqgispython2.14.11_2.14.11+dfsg-2_amd64.deb
 83f1840b49663e7a076549c078217c593d36d539f9f5c207a9f25b17b7d639d0 3642686 
python-qgis-common_2.14.11+dfsg-2_all.deb
 5b9b96bc0be6b07a7381697836dccdc4d28aea0b3fd60b2649ebf437000f077c 4551822 
python-qgis_2.14.11+dfsg-2_amd64.deb
 057abd0266513f4107c36b432ffcdd6e3b31095dfe372d7ef0188ce0e9644fed 162317906 
qgis-api-doc_2.14.11+dfsg-2_all.deb
 53579363c6444c21cb94fe6f9f5e7ef64da9ca27c4d55d690e53d56e30964cfa 10163472 
qgis-common_2.14.11+dfsg-2_all.deb
 b2d78bb71b1a89bf42d0f0b6e7734256685d3de31a9d1d240396b2fa85a71b4e 212047906 
qgis-dbg_2.14.11+dfsg-2_amd64.deb
 bdaa6952c703becfe4130d6707f8030de6d5150287187065da94a7b466d5994c 1642796 
qgis-plugin-grass-common_2.14.11+dfsg-2_all.deb
 f6015ec86d5949ef96746c9d15c25a0b001f30b3f28eb3d1cf0e5dfb278b1dc7 1731998 
qgis-plugin-grass_2.14.11+dfsg-2_amd64.deb
 85290a94d1e96014b0e27a6595d6e8b55db284a417ed56a82b15481e2a33487a 1230056 
qgis-provider-grass_2.14.11+dfsg-2_amd64.deb
 3c92f331d3d4065be7cc40930d33c8efbd1cc0032e1f6e5d8f3b7b7e1b40d9ed 1928080 
qgis-providers-common_2.14.11+dfsg-2_all.deb
 2f67a1c154c7bdd88032a02960487985933bd030d73f2902bec6a7521cbc12f7 2324458 
qgis-providers_2.14.11+dfsg-2_amd64.deb
 fde5806f2d7acb26f6879046e020496f58f887aedde2f91fca5d2acf6bf27f80 1634694 
qgis-server_2.14.11+dfsg-2_amd64.deb
 af4fe5657db6685d7c292d0766ba679873c5c7bc3c0ee84f24bfd668135ade28 27639 
qgis_2.14.11+dfsg-2_amd64.buildinfo
 6de70fac66e613ed35f59a801b522838988daa4b04daa8c430aa83d34d532efa 4784266 
qgis_2.14.11+dfsg-2_amd64.deb
Files:
 59d91629eabf5290045ce2a5c4f53426 4365 science optional qgis_2.14.11+dfsg-2.dsc
 d67524b54f926763d88d991cf451532c 1329372 science optional 
qgis_2.14.11+dfsg-2.debian.tar.xz
 67283f279000fb4772032c829beeb9cb 1327582 libs optional 
libqgis-analysis2.14.11_2.14.11+dfsg-2_amd64.deb
 668350e3de228fee7c6663ccfecede8c 3117498 libs optional 
libqgis-app2.14.11_2.14.11+dfsg-2_amd64.deb
 8a5807a061ff9898ae543ecb432d786c 3928764 libs optional 
libqgis-core2.14.11_2.14.11+dfsg-2_amd64.deb
 c8887232f9be76dee2bfa3134d769f9f 2705308 science optional 
libqgis-customwidgets_2.14.11+dfsg-2_amd64.deb
 c79ccc3a66870feb4830a80e1b13bbb2 1728636 libdevel optional 
libqgis-dev_2.14.11+dfsg-2_amd64.deb
 721f82b63d9de787203512f6e10484db 2951410 libs optional 
libqgis-gui2.14.11_2.14.11+dfsg-2_amd64.deb
 7ea94cda78f95fac23583c5dec18a18c 1188932 libs optional 
libqgis-networkanalysis2.14.11_2.14.11+dfsg-2_amd64.deb
 49317397b5c2625fc8971c69e9922a88 1534498 science optional 
libqgis-server2.14.11_2.14.11+dfsg-2_amd64.deb
 557edb2d0906d171bebe237a56721df8 1363172 libs optional 
libqgisgrass7-2.14.11_2.14.11+dfsg-2_amd64.deb
 3ac47906d6651d547af8f2d408eacfa2 1184828 libs optional 
libqgispython2.14.11_2.14.11+dfsg-2_amd64.deb
 a9efb6de8a6c48c0cf9ced98f3992e4b 3642686 python optional 
python-qgis-common_2.14.11+dfsg-2_all.deb
 839625d1c35dd92e80ec8391921b6c8a 4551822 python optional 
python-qgis_2.14.11+dfsg-2_amd64.deb
 b462fe5968a2fc8c932997ffb4deb1e0 162317906 doc optional 
qgis-api-doc_2.14.11+dfsg-2_all.deb
 4db7ff9c21251771247cc38fed05e9e3 10163472 science optional 
qgis-common_2.14.11+dfsg-2_all.deb
 16d822a1faf2bc9d65287473d11793d4 212047906 debug extra 
qgis-dbg_2.14.11+dfsg-2_amd64.deb
 b7adbc4cc799de531de557ebcd227ac2 1642796 science optional 
qgis-plugin-grass-common_2.14.11+dfsg-2_all.deb
 fa597a108ee36dc44b5220ac1b8e2578 1731998 science optional 
qgis-plugin-grass_2.14.11+dfsg-2_amd64.deb
 d165253a1d13884be3b9aba5a4bc28de 1230056 science optional 
qgis-provider-grass_2.14.11+dfsg-2_amd64.deb
 dc0c468e344e366af9614487b31c9b00 1928080 science optional 
qgis-providers-common_2.14.11+dfsg-2_all.deb
 7752ed9519b5dd3c3228458d76f89e73 2324458 science optional 
qgis-providers_2.14.11+dfsg-2_amd64.deb
 c159ac5b8c9d85d71a61608ee5db15b2 1634694 science optional 
qgis-server_2.14.11+dfsg-2_amd64.deb
 8ddbbe046ace6f75e520f53650411e47 27639 science optional 
qgis_2.14.11+dfsg-2_amd64.buildinfo
 f21f874df8571b830bdf3b1a447f9cae 4784266 science optional 
qgis_2.14.11+dfsg-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJYof7QAAoJEGdQ8QrojUrxUnMP/2acWqjGYgYWxjbjBL9GiSP+
xJraZ49GhB1S0qZiC00/w/EnhMyPMxVkhb8FTzLfpsTpJvnGAqkQj0eFS/zvPr++
ongls3Moi/mrXE61vuFxlADO4mZ4nkpkfret6oMhzFojbfMW26/LrI/2+AL0DcON
nUF324PFYJekOO1EL90cCMCRiaKHBx2/ihHkT472OJiJaUkv61wThUX1FxsGDiM3
e7gk1DW/kiiG/7hjj3DB7V0jir2zMeE5yJXPTdkdJKzF7y/sFJUPtzsNzV5AeRx1
Cj7f69//LJFrMs1vBGQQ/ghk+t7WOqWzBLJ4VVtR8ZIyL8PAoTjyBgvgAs7VH7Wu
9z5vp9zr9fw+GVHj82H5Aj4eR4w9SHe0Sw6t6KxsNO7otZTHs37A6tFgUnfPgYfd
g5QAvvzOo6DN6zU1Jv/EDmbneFmBDduHWk0vXHCImRAD2yJFlhLY/T6vLutRgbu7
h1WCBeWwzlhaqiF1UcpymMBKNf4FajbXjvt9Dv8BUhKzFJ2hM9kJxcJtRabqhedT
vk6ljij8dOGO1cdsgz3X0ZeV2k/vGekT9L2zv9MTmzY1adCf7K6broinYAcR3E2+
D9tPEB0m1rAYX9Mnm8W3cXKA710DuE18nY4relM+Ose3dOJ1LUfPY1DKE3smL9u5
AomS6Vq0SG4Oa38kiWtQ
=mi5H
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-grass-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-grass-devel

Reply via email to