Bug#700951: libwww-youtube-download-perl: Versions before 0.41 broken after YouTube website changes

[gregor herrmann]

Package: libwww-youtube-download-perl
Version: 0.40-1
Severity: grave
Tags: upstream fixed-upstream patch
Justification: renders package unusable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

0.40-1 in testing doesn't work after some YouTube changes:

% youtube-download VtItBX1l1VY
- --> Working on VtItBX1l1VY
Downloading `VtItBX1l1VY.mp4`
ERROR: [VtItBX1l1VY] !! VtItBX1l1VY download failed: 403 Forbidden at /usr/bin/youtube-download line 59

0.45-1 in unstable downloads the video, presumably the fix was introduced
in 0.41:

"- follow the change of site"


So I guess we can either
1a) Ask the release team to unblock 0.45-1 (ha!).
1b) Find and backport the relevant fix and upload to t-p-u. [0]

    Both options would mean to follow all changes for the wheezy
    lifetime.

2)  Ask for removal of the package from testing.


I prefer (2); other opinions?


Cheers,
gregor


[0]
Might be:

#v+
diff --git a/lib/WWW/YouTube/Download.pm b/lib/WWW/YouTube/Download.pm
index 7f12e13..55d08e0 100644
- --- a/lib/WWW/YouTube/Download.pm
+++ b/lib/WWW/YouTube/Download.pm
@@ -222,7 +234,9 @@ sub _parse_stream_map {
         my $uri = URI->new;
         $uri->query($stuff);
         my $query = +{ $uri->query_form };
- -        $fmt_url_map->{$query->{itag}} = $query->{url};
+        my $sig = $query->{sig};
+        my $url = $query->{url};
+        $fmt_url_map->{$query->{itag}} = $url.'&signature='.$sig;
     }
 
     return $fmt_url_map;
#v-

Or more, this is from the diff of our package; github has one big commit :/
https://github.com/xaicron/p5-www-youtube-download/commit/cefcc182a2f2227c741d513d83775a29a453e6d8


So let's try. *applying patch locally*


Yes, that's it:

% youtube-download VtItBX1l1VY
- --> Working on VtItBX1l1VY
Downloading `VtItBX1l1VY.mp4`
80229970/80229970 (100.00%)
Download successfully!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBCAAGBQJRI6NNAAoJELs6aAGGSaoGDUcP/3l9GRJFVed4//e7iEHWLXih
CyNTiE0s5WFeOtV+8rcOHevToNhgD3yofbnu+/qXafUz/Vkdp+CNdZWDfWh3/Ncq
cCv21STdpVWugjaRydpAKs/Yd8jjXD/jTYL4vNP1bcG/Aha634yb/QxIpMgYGSG1
YvsTp5XeH5fnus0pUq0I3oSngJdJEd54xPxMleB7VjquHk0Cv6XgfuuC8nQ4McdA
uDtWgwNWO4gex435zcpVwt0oneh7emd4jsEMtSdo7DFE7QEYbEhrc/067k42VFRV
f/YNTPHUDwGuM9h/TLrfVFmhqzm/02b4IKA1ae82Ocl0oPJW+La4emCBgBIjsnBs
7clmn1MD2fvc+sniV1JNixJG2dW3abCs5X1zf4cf4yrwZh10RizTZHEYaRREVfjl
W6Xo0BOW/UjiV2MJ3PIFahGM8R6oXTEgKRbBX/neLgQZArzE7aws2boWISPggXdp
gX9Tvy5Fp+S8jB++4/dQM8XMV2Bli9V+/q8JTfbAcB1JNJnYRKplpskSjEI+nnHK
0fG1CqUKMjrtgIUYhECS6z1ONtvE/v8kai5yrRtBm9glYgbJk/1VSXe+FqUG22xU
qGessG2akgba7iEM8jf0DrEFteLjZHRS4g30pf4SdZshJhFnNgm7phWkO2nqyG6D
qnR30zwi0p3zyoRm5Z68
=08Pw
-----END PGP SIGNATURE-----