Package: php-icinga Version: 2.1.0-1 Severity: important Control: affects -1 zendframework
Hi, php-icinga depends on zendframework (version 1), but this package is unlikely to make it for Stretch: we intend to ship version 3 of zendframework (version 2 is already partly in unstable, and version 3 in experimental), that is maintained in separate packages (associated with separate upstream components). We’d thus like to get rid of the zendframework package as soon as possible after Jessie gets released. I’ve not looked at how Zend is actually used, but feel free to point it new packages that will be needed in order to ensure smooth upgrade. Do not hesitate to stay in touch with the Debian PHP PEAR Maintainers team <pkg-php-p...@lists.alioth.debian.org> if you need any help moving forward. Regards David P.-S.: I noticed that upstream embeds the same security flawed dompdf version that we are currently shipping in Debian (#813849), you may wish to alert them about it (and consider stepping up for the maintenance of php-dompdf, #748604).
signature.asc
Description: PGP signature