Comment 7 for bug 1593024

Revision history for this message
Nish Aravamudan (nacc) wrote : Re: Unblacklist and sync zendframework 1.12.18+dfsg-1 (universe) from Debian unstable (main)

Hi Jeremy!

Thank you very much for bringing this to my attention! I am attaching the debdiff I have now which seems to work for 16.04 -> 16.10 (ensuring zend-framework gets replaced by zendframework). Note that zend-framework itself is *also* a transitional package, which refers to libzend-framework-php, which is replaced by zendframework as well. Any feedback is greatly appreciated! I especially am not sure if we should try to provide compatibility symlinks for any directories from zend-framework.

Finally, there is libzend-framework-zendx-php, which does not have a corresponding package in Debian. I am not sure what to do with this package, as since Ubuntu and Debian have been using different upstream tarball sources, there are no ZendX files in the Debian tarballs.

I have reviewed the following bugs as well, my comments follow:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688033
  - Debian stating they are not going to take the Ubuntu version, and they view the Ubuntu version to be unmaintained (and full of potential security issues), as 1.11.11 was released in 2011 with 23 (!!) upstream releases in ZF1 (ZendFramework v1) since that version.

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1066406
  - The path used by zend-framework is non-standard. zendframework uses the expected path(s).

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1450308
  - We probably can fix this in zend-framework with backports for Trusty/Precise, but indicates another problem with having this differing packaging and lack of maintainership.

https://bugs.launchpad.net/ubuntu/+source/zendframework/+bug/580507
  - The original blacklist bug. While it mentions "more goodies" in the bug description, no comment is made as to what they are and why they are necessary, better, etc. From what I can tell, the primary benefit of zend-framework is the inclusion of the "extras" library from upstream. But these are unsupported upstream, and seem like they should not be actually depended on.

https://bugs.launchpad.net/ubuntu/+source/zend-framework/+bug/1052423
  - A prior request to sync. The discussion didn't seem to go anywhere, beyond there having been at some time an active Ubuntu maintainer. But now there is not and I believe those arguments are no longer valid.

Note also that the debian/watch file for zend-framework leads `uscan` to want to update to ZF2, while the zendframework debian/watch file stays on ZF1.

-Nish