Bug 19278 - xfce4-weather-plugin uses deprecated weather API URL
Summary: xfce4-weather-plugin uses deprecated weather API URL
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL: https://www.slightfuture.com/devel/me...
Whiteboard: MGA5-64-OK advisory
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2016-09-01 11:18 CEST by Jani Välimaa
Modified: 2016-09-22 13:38 CEST (History)
3 users (show)

See Also:
Source RPM: xfce4-weather-plugin-0.8.5-2.mga5
CVE:
Status comment:


Attachments

Description Jani Välimaa 2016-09-01 11:18:20 CEST
Currently xfce4-weather-plugin fetches its weather information from api.yr.no API endpoint and it is to be shut down on the 2016-09-05 [1].

A new replacement API endpoint api.met.no exists and the latest xfce4-weather-plugin 0.8.8 uses it and HTTPS connection to improve security and privacy.

0.8.8 includes also lots of translation updates and only a few changes, some build time fixes and bug fixes reported to upstream bugzilla [2] [3], so I think it's fairly safe to update to the latest version.

[1] https://www.slightfuture.com/devel/met-norway-api-endpoints
[2] https://bugzilla.xfce.org/show_bug.cgi?id=11604
[3] https://bugzilla.xfce.org/show_bug.cgi?id=12333
Comment 1 Jani Välimaa 2016-09-01 12:16:33 CEST
Pushed xfce4-weather-plugin 0.8.8. to core/updates_testing.

Please test that it works after update and fetches weather data from https://api.met.no/. It's easily proved by checking ~/.xsession-errors after refreshing data via applet's right click menu.

Assignee: jani.valimaa => qa-bugs

Comment 2 Chris B 2016-09-09 21:01:26 CEST
I get: No Data

.xsession-errors:

(wrapper-1.0:2368): weather-WARNING **: Download of weather data failed with HTTP Status Code 6, Reason phrase: TLS/SSL support not available; install glib-networking
weather-Message: getting https://api.met.no/weatherapi/sunrise/1.1/?lat=52.500000;lon=5.750000;from=2016-09-09;to=2016-10-04
weather-Message: getting https://api.met.no/weatherapi/locationforecastlts/1.2/?lat=52.500000;lon=5.750000;msl=-5

thanks, Jani!

CC: (none) => shybluenight

Comment 3 Jani Välimaa 2016-09-09 21:07:10 CEST
I'll add requires for glib-networking to get TLS/SSL to work.
Comment 4 Chris B 2016-09-09 21:12:38 CEST
Thanks Jani, I've urpmi'd glib-networking, had to reboot (maybe re-login is enough?), all is well.
Comment 5 Jani Välimaa 2016-09-09 21:18:18 CEST
(In reply to Chris B from comment #4)
> Thanks Jani, I've urpmi'd glib-networking, had to reboot (maybe re-login is
> enough?), all is well.

'xfce4-panel -r' in terminal is enough.
Comment 6 Jani Välimaa 2016-09-09 21:19:08 CEST
Pushed xfce4-weather-plugin 0.8.8-1.1 to core/updates_testing to fix missing requires for glib-networking.
Comment 7 Chris B 2016-09-10 09:52:46 CEST
New version works. Tested in M5 64bit.

Works as well in M6.
Jani Välimaa 2016-09-10 11:02:22 CEST

Whiteboard: (none) => MGA5-64-OK

Comment 8 Chris B 2016-09-10 12:54:05 CEST
32bit tested- new version works.

[root@localhost chris]# uname -r
4.4.16-desktop-1.mga5
[root@localhost chris]# urpmi xfce4-weather-plugin
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  glib-networking                2.42.1       1.mga5        i586    
  libglib-networking             2.42.1       1.mga5        i586    
(medium "Core Updates Testing")
  xfce4-weather-plugin           0.8.8        1.1.mga5      i586    
4.5MB of additional disk space will be used.
2.4MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n)
Dave Hodgins 2016-09-12 00:18:32 CEST

Keywords: (none) => validated_update
Whiteboard: MGA5-64-OK => MGA5-64-OK advisory
CC: (none) => davidwhodgins, sysadmin-bugs

Comment 9 Mageia Robot 2016-09-22 13:38:16 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGAA-2016-0114.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.