Bug 19278

Summary:	xfce4-weather-plugin uses deprecated weather API URL
Product:	Mageia	Reporter:	Jani Välimaa <jani.valimaa>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	davidwhodgins, shybluenight, sysadmin-bugs
Version:	5	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://www.slightfuture.com/devel/met-norway-api-endpoints
Whiteboard:	MGA5-64-OK advisory
Source RPM:	xfce4-weather-plugin-0.8.5-2.mga5	CVE:
Status comment:

Description Jani Välimaa 2016-09-01 11:18:20 CEST

Currently xfce4-weather-plugin fetches its weather information from api.yr.no API endpoint and it is to be shut down on the 2016-09-05 [1].

A new replacement API endpoint api.met.no exists and the latest xfce4-weather-plugin 0.8.8 uses it and HTTPS connection to improve security and privacy.

0.8.8 includes also lots of translation updates and only a few changes, some build time fixes and bug fixes reported to upstream bugzilla [2] [3], so I think it's fairly safe to update to the latest version.

[1] https://www.slightfuture.com/devel/met-norway-api-endpoints
[2] https://bugzilla.xfce.org/show_bug.cgi?id=11604
[3] https://bugzilla.xfce.org/show_bug.cgi?id=12333

Comment 1 Jani Välimaa 2016-09-01 12:16:33 CEST

Pushed xfce4-weather-plugin 0.8.8. to core/updates_testing.

Please test that it works after update and fetches weather data from https://api.met.no/. It's easily proved by checking ~/.xsession-errors after refreshing data via applet's right click menu.

Assignee: jani.valimaa => qa-bugs

Comment 2 Chris B 2016-09-09 21:01:26 CEST

I get: No Data

.xsession-errors:

(wrapper-1.0:2368): weather-WARNING **: Download of weather data failed with HTTP Status Code 6, Reason phrase: TLS/SSL support not available; install glib-networking
weather-Message: getting https://api.met.no/weatherapi/sunrise/1.1/?lat=52.500000;lon=5.750000;from=2016-09-09;to=2016-10-04
weather-Message: getting https://api.met.no/weatherapi/locationforecastlts/1.2/?lat=52.500000;lon=5.750000;msl=-5

thanks, Jani!

CC: (none) => shybluenight

Comment 3 Jani Välimaa 2016-09-09 21:07:10 CEST

I'll add requires for glib-networking to get TLS/SSL to work.

Comment 4 Chris B 2016-09-09 21:12:38 CEST

Thanks Jani, I've urpmi'd glib-networking, had to reboot (maybe re-login is enough?), all is well.

Comment 5 Jani Välimaa 2016-09-09 21:18:18 CEST

(In reply to Chris B from comment #4)
> Thanks Jani, I've urpmi'd glib-networking, had to reboot (maybe re-login is
> enough?), all is well.

'xfce4-panel -r' in terminal is enough.

Comment 6 Jani Välimaa 2016-09-09 21:19:08 CEST

Pushed xfce4-weather-plugin 0.8.8-1.1 to core/updates_testing to fix missing requires for glib-networking.

Comment 7 Chris B 2016-09-10 09:52:46 CEST

New version works. Tested in M5 64bit.

Works as well in M6.

Jani Välimaa 2016-09-10 11:02:22 CEST

Whiteboard: (none) => MGA5-64-OK

Comment 8 Chris B 2016-09-10 12:54:05 CEST

32bit tested- new version works.

[root@localhost chris]# uname -r
4.4.16-desktop-1.mga5
[root@localhost chris]# urpmi xfce4-weather-plugin
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  glib-networking                2.42.1       1.mga5        i586    
  libglib-networking             2.42.1       1.mga5        i586    
(medium "Core Updates Testing")
  xfce4-weather-plugin           0.8.8        1.1.mga5      i586    
4.5MB of additional disk space will be used.
2.4MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n)

Dave Hodgins 2016-09-12 00:18:32 CEST

Keywords: (none) => validated_update
Whiteboard: MGA5-64-OK => MGA5-64-OK advisory
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 9 Mageia Robot 2016-09-22 13:38:16 CEST

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2016-0114.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED