[Bug 1593024] Re: Unblacklist and sync zendframework 1.12.18+dfsg-1 (universe) from Debian unstable (main)

[Nish Aravamudan]

Hi Jeremy!

Thank you very much for bringing this to my attention! I am attaching
the debdiff I have now which seems to work for 16.04 -> 16.10 (ensuring
zend-framework gets replaced by zendframework). Note that zend-framework
itself is *also* a transitional package, which refers to libzend-
framework-php, which is replaced by zendframework as well. Any feedback
is greatly appreciated! I especially am not sure if we should try to
provide compatibility symlinks for any directories from zend-framework.

Finally, there is libzend-framework-zendx-php, which does not have a
corresponding package in Debian. I am not sure what to do with this
package, as since Ubuntu and Debian have been using different upstream
tarball sources, there are no ZendX files in the Debian tarballs.

I have reviewed the following bugs as well, my comments follow:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688033
  - Debian stating they are not going to take the Ubuntu version, and they view the Ubuntu version to be unmaintained (and full of potential security issues), as 1.11.11 was released in 2011 with 23 (!!) upstream releases in ZF1 (ZendFramework v1) since that version.

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1066406
  - The path used by zend-framework is non-standard. zendframework uses the expected path(s).

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1450308
  - We probably can fix this in zend-framework with backports for Trusty/Precise, but indicates another problem with having this differing packaging and lack of maintainership.

https://bugs.launchpad.net/ubuntu/+source/zendframework/+bug/580507
  - The original blacklist bug. While it mentions "more goodies" in the bug description, no comment is made as to what they are and why they are necessary, better, etc. From what I can tell, the primary benefit of zend-framework is the inclusion of the "extras" library from upstream. But these are unsupported upstream, and seem like they should not be actually depended on.

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1052423
  - A prior request to sync. The discussion didn't seem to go anywhere, beyond there having been at some time an active Ubuntu maintainer. But now there is not and I believe those arguments are no longer valid.

Note also that the debian/watch file for zend-framework leads `uscan` to
want to update to ZF2, while the zendframework debian/watch file stays
on ZF1.

-Nish

-- 
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1593024

Title:
  Unblacklist and sync zendframework 1.12.18+dfsg-1 (universe) from
  Debian unstable (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/icingaweb2/+bug/1593024/+subscriptions