Red Hat Bugzilla – Bug 243638
Update neon to 0.27 (or latest)
Last modified: 2007-11-30 17:12:07 EST
Description of problem: Upgrade the neon package to the latest upstream version. The current version is quite old and a few vulnerabilities have been fixed since the version currently packaged was released. Also davfs2 (a WebDAV client) recommends the latest version of neon. If possible could the latest version be packaged.
Eric, I'm sure it would be done immediately, but Subversion 1.4.4 (released the 8th of June, but probably also the available release in F7, 1.4.3) requires neon 0.25.x. (or, at least, seems so from the ./configure output).
0.27 is nearly ready upstream so I'm just going to hold off for that; the 0.27 API is hopefully going to be the stable 1.x API so no more ABI breaks.
The current list of packages which link against neon in Raw Hide is as follows: bazaar, cadaver, openoffice.org, rapidsvn, subcommander, subversion, tla, wdfs CC'ing all maintainers for the above. I'd like to update neon in Raw Hide to the now-released 0.27 release this week. I'll go through and check what breaks (other than OO since I doubt I have the horsepower to rebuild that) first. If there are any objections to updating neon please let me know. There are only minor API breaks in 0.27 since 0.26 which shouldn't affect many users. There are some more significant changes between 0.25 and 0.26. rapidsvn and subcommander probably only pick up the libneon dep because of the .la file leak, which I just fixed in Raw Hide. If the maintainers for each could rebuild those it should disappear. There will be a library compat package to ease the transition.
Rebuild status: bazaar - builds with minor patch, package is orphaned & should be retired cadaver - builds as of 0.23.0 release, pending openoffice - neon support currently disabled rapidsvn - builds fine subcommander - builds fine subversion - builds with minor spec file change tla - builds fine wdfs - builds fine I will go ahead with the neon update tomorrow unless anybody shouts.
neon 0.27 is now in dist-f8. I will fire off rebuilds of any of the above packages (except OO) where access control permits.
OOo claimed to require ne_set_status but turned out that the callback was empty so could be dropped rather than reworked for ne_set_notifier, so easy to reenable.
Thanks Caolan. Current rebuild status: bazaar - builds with minor patch, package is orphaned & should be retired subcommander - pending rebuild from maintainer openoffice - rebuild in progress cadaver - done rapidsvn - done subversion - done tla - done wdfs - done
Subcommander should be built on koji now.