Comment 5 for bug 1744148

@Marc: php7.0/7.1 is ready to sponsor into xenial-security (and -updates). You should only need to do some changelog mangling to match the security team's format, and a `uscan` to grab the orig tarball from upstream.