Muon accesses api.opendesktop.org without informing the user

Bug #1367618 reported by Sergio Callegari
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
muon (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Looks like at every invocation muon-updater accesses api.opendesktop.org.
This is done without a clear reason, since the updater should check the apt lists configured in ubuntu that don't include anything at opendesktop.org.
Furthermore, this is done without the user being informed about it, nor without the user having the possibility to disable this functionality.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: muon-updater 2.2.0-0ubuntu3.1
Uname: Linux 3.16.2-031602-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.3
Architecture: amd64
CurrentDesktop: KDE
Date: Wed Sep 10 09:27:56 2014
EcryptfsInUse: Yes
InstallationDate: Installed on 2013-12-12 (271 days ago)
InstallationMedia: Kubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
SourcePackage: muon
UpgradeStatus: Upgraded to trusty on 2014-05-06 (127 days ago)

Revision history for this message
Sergio Callegari (callegar) wrote :
Revision history for this message
Harald Sitter (apachelogger) wrote :

Not a bug. It access opendesktop to update plasma widgets and whatnot.

Changed in muon (Ubuntu):
status: New → Invalid
Revision history for this message
Sergio Callegari (callegar) wrote :

Sorry, this is not mentioned in the package description anywhere and seems something the user should be informed about.

I was expecting the package to be a KDE replacement of synaptic and the other apt frontends available in ubuntu, not to update part of the system out of the deb packaging system or what the user controls via the apt lists.

Out of curiosity:
Where do the updated plasma widgets go in the system?
Does this mean that if I disable everything in the apt lists a kubuntu machine keeps updating part of the system?
Why is the whole functionality of muon-updater broken if I do not authorize it to contact opendesktop.org using the expired certificate dialog? (namely, updated deb packages cannot be installed)
Can it be that the fact that opendesktop needs to be contacted is the reason why in many occasions the following happens? A notification icon appears about security updates; one clicks and the muon updater opens; the list of the upgradable packages is shown for an instant then it disappears; the updater shows just a progress indicator; this can last for many minutes.
Is apper the same in this respect?

Thanks for any information you may provide

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.