zendframework (1.12.20+dfsg-1ubuntu1) zesty; urgency=medium

  * zend-framework -> zendframework transition (LP: #1593024,
    LP: #1066406):
    - Modify the definitions of zendframework and zendframework-bin to
      Replace & Break zend-framework and zend-framework-bin versions
      before this one.
    - Define transitional dummy packages for zend-framework,
      zend-framework-bin and libzend-framework-php. They can be dropped
      after 18.04 releases.
      + zend-framework also shipped a libzend-framework-zendx-php binary
        package, which is not present in zendframework.
        - zend-framework used a different upstream source that included
          ZendX. Per LP #1052423, the ZendX addons are "are experimental
          or not ready for production" and if there is anyone
          depending on this leaf package, it should be resolved in
          Debian via a new bug.
    - d/libzend-framework-php.maintscript: remove zend-framework.ini, as
      it is only used by libzend-framework-php.
    - d/libzend-framework-php.preinst: call phpdismod to remove
      zend-framework.ini symlinks for all PHP SAPIs.
      + As no PHP module is actually shipped by libzend-framework-php,
        it is safe to remove and disable this conffile, as it should
        only have been used to modify the include_path. That is, unlike
        other .ini files, no runtime behavior is intended to be
        controlled by this file.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Tue, 06 Dec 2016 13:38:26 +0100

zendframework (1.12.20+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * Preparation for 1.12.20

  [ David Prévot ]
  * Document now assigned CVE in previous changelog entry

  [ Enrico Zimuel ]
  * Fixed SQL Injection in order and group

 -- David Prévot <taffit@debian.org>  Sat, 10 Sep 2016 11:33:39 -1000

zendframework (1.12.19+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * Added EOL announcement to README and CONTRIBUTING guide
  * Prepared for 1.12.19 release

  [ Enrico Zimuel ]
  * Fixed potential SQL injections in order() and group() [CVE-2016-6233]

 -- David Prévot <taffit@debian.org>  Fri, 15 Jul 2016 15:14:39 -0400

zendframework (1.12.18+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * 1.12.18 preparations

  [ Enrico Zimuel ]
  * Fixed the rand usage

  [ Frank Brückner ]
  * Removes Zend_Gdata_YouTube which is based on Data API v2

  [ David Prévot ]
  * Update Standards-Version to 3.9.8

 -- David Prévot <taffit@debian.org>  Wed, 13 Apr 2016 16:57:00 -0400

zendframework (1.12.17+dfsg-2) unstable; urgency=medium

  * PHP 7.0 transition:
    - Update php5-* dependencies to php-*
    - Suggest other php- extensions no longer builtin
    - Rebuild with latest pkg-php-tools
  * Drop ownCloud for Debian maintainers from uploaders
  * Update Standards-Version to 3.9.7

 -- David Prévot <taffit@debian.org>  Sat, 05 Mar 2016 10:32:52 -0400

zendframework (1.12.17+dfsg-1) unstable; urgency=medium

  [ Martin Hujer ]
  * Zend_Validate_Hostname - updated TLD list to the version 2015102801

  [ Enrico Zimuel ]
  * Fixed the null byte test for Zend_Db_Adapter_Pdo
  * ZF2015-09: Fixed entropy issue in word CAPTCHA

 -- David Prévot <taffit@debian.org>  Mon, 23 Nov 2015 21:57:00 -0400

zendframework (1.12.16+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * [ZF2015-07] Use umask of 0002 [CVE-2015-5723]
  * [1.12.16] release readiness

  [ Enrico Zimuel ]
  * [ZF2015-08] Fix null byte injection for PDO MsSql [CVE-2014-8089]

 -- David Prévot <taffit@debian.org>  Wed, 16 Sep 2015 08:08:40 -0400

zendframework (1.12.15+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * [1.12.15] Release readinesss

 -- David Prévot <taffit@debian.org>  Sat, 29 Aug 2015 15:58:10 -0400

zendframework (1.12.14+dfsg-1) unstable; urgency=medium

  [ Frank Brückner ]
  * Classes for Technorati removed

  [ Matthew Weier O'Phinney ]
  * [ZF2015-06] Fix potential XXE vector via BOM detection [CVE-2015-5161]

  [ Martin Hujer ]
  * Drop DeveloperGarden API implementation as it shuts down on 30th June 2015

 -- David Prévot <taffit@debian.org>  Tue, 11 Aug 2015 09:34:58 +0200

zendframework (1.12.13+dfsg-1) unstable; urgency=medium

  [ Matthew Weier O'Phinney ]
  * Cast int and float to string when creating headers
  * [1.12.13] Release readiness

 -- David Prévot <taffit@debian.org>  Wed, 20 May 2015 12:09:09 -0400

# For older changelog entries, run 'apt-get changelog zendframework'
