Kolab Groupware OBS

php-ZendFramework.spec Changed

@@ -10,15 +10,18 @@
 
 Summary:         Leading open-source PHP framework
 Name:            php-ZendFramework
-Version:         1.12.5
-Release:         2%{?posttag}%{?dist}
+Version:         1.12.20
+Release:         1%{?posttag}%{?dist}
 
 License:         BSD
 Group:           Development/Libraries
-Source0:         http://framework.zend.com/releases/%{php_name}-%{version}%{?posttag}/%{php_name}-%{version}%{?posttag}.tar.gz
+Source0:         https://packages.zendframework.com/releases/%{php_name}-%{version}%{?posttag}/%{php_name}-%{version}%{?posttag}.tar.gz
 Source1:         README.fedora
 URL:             http://framework.zend.com/
 
+%if 0%{?rhel} == 5
+%endif
+
 BuildArch:       noarch
 
 Requires: php-bcmath
@@ -81,6 +84,7 @@
 Group:    Development/Libraries
 Requires: %{name} = %{version}-%{release}
 Provides: %{name}-ZendX = %{version}-%{release}
+Provides: php-composer(zendframework/zf1-extras) = %{version}
 
 %description extras
 This package includes the ZendX libraries.
@@ -110,6 +114,7 @@
 Requires: %{name}-Serializer-Adapter-Igbinary = %{version}-%{release}
 Requires: %{name}-Services = %{version}-%{release}
 Requires: %{name}-Soap = %{version}-%{release}
+Provides: php-composer(zendframework/zendframework1) = %{version}
 
 %description full
 This package is a meta package designed to track in all subpackages and install
@@ -263,7 +268,7 @@
 Group:    Development/Libraries
 Requires: %{name} = %{version}-%{release}
 Requires: %{name}-Db-Adapter-Pdo = %{version}-%{release}
-Requires: php-mssql
+Requires: php-pdo_dblib
 
 %description Db-Adapter-Pdo-Mssql
 This package contains the files for Zend Framework necessary to connect to MS 
@@ -275,7 +280,7 @@
 Group:    Development/Libraries
 Requires: %{name} = %{version}-%{release}
 Requires: %{name}-Db-Adapter-Pdo = %{version}-%{release}
-Requires: php-mysqlnd
+Requires: php-pdo_mysql
 
 %description Db-Adapter-Pdo-Mysql
 This package contains the files for Zend Framework necessary to connect to MySQL
@@ -385,7 +390,6 @@
 - Amazon (including EC2, S3)
 - Audioscrobbler
 - del.icio.us
-- Developer Garden
 - eBay
 - Flickr
 - LiveDocx
@@ -396,7 +400,6 @@
 - SlideShare
 - SqlAzure
 - StrikeIron
-- Technorati
 - Twitter
 - Windows Azure
 - Yahoo!
@@ -463,9 +466,6 @@
   $RPM_BUILD_ROOT%{_bindir}/zf
 
 
-%clean
-%{__rm} -rf $RPM_BUILD_ROOT
-
 
 %files
 %doc LICENSE.txt DEVELOPMENT_README.md INSTALL.md README.md README-GIT.md
@@ -582,7 +582,6 @@
 %exclude %{_datadir}/%{php}/Zend/Service/Audioscrobbler.php
 %exclude %{_datadir}/%{php}/Zend/Service/Delicious.php
 %exclude %{_datadir}/%{php}/Zend/Service/Delicious
-%exclude %{_datadir}/%{php}/Zend/Service/DeveloperGarden
 %exclude %{_datadir}/%{php}/Zend/Service/Ebay
 %exclude %{_datadir}/%{php}/Zend/Service/Flickr.php
 %exclude %{_datadir}/%{php}/Zend/Service/Flickr
@@ -597,8 +596,6 @@
 %exclude %{_datadir}/%{php}/Zend/Service/SqlAzure
 %exclude %{_datadir}/%{php}/Zend/Service/StrikeIron.php
 %exclude %{_datadir}/%{php}/Zend/Service/StrikeIron
-%exclude %{_datadir}/%{php}/Zend/Service/Technorati.php
-%exclude %{_datadir}/%{php}/Zend/Service/Technorati
 %exclude %{_datadir}/%{php}/Zend/Service/Twitter.php
 %exclude %{_datadir}/%{php}/Zend/Service/Twitter
 %exclude %{_datadir}/%{php}/Zend/Service/WindowsAzure
@@ -759,7 +756,6 @@
 %{_datadir}/%{php}/Zend/Service/Audioscrobbler.php
 %{_datadir}/%{php}/Zend/Service/Delicious.php
 %{_datadir}/%{php}/Zend/Service/Delicious
-%{_datadir}/%{php}/Zend/Service/DeveloperGarden
 %{_datadir}/%{php}/Zend/Service/Ebay
 %{_datadir}/%{php}/Zend/Service/Flickr.php
 %{_datadir}/%{php}/Zend/Service/Flickr
@@ -774,8 +770,6 @@
 %{_datadir}/%{php}/Zend/Service/SqlAzure
 %{_datadir}/%{php}/Zend/Service/StrikeIron.php
 %{_datadir}/%{php}/Zend/Service/StrikeIron
-%{_datadir}/%{php}/Zend/Service/Technorati.php
-%{_datadir}/%{php}/Zend/Service/Technorati
 %{_datadir}/%{php}/Zend/Service/Twitter.php
 %{_datadir}/%{php}/Zend/Service/Twitter
 %{_datadir}/%{php}/Zend/Service/WindowsAzure
@@ -789,6 +783,50 @@
 
 
 %changelog
+* Tue Sep 27 2016 Felix Kaechele <heffer@fedoraproject.org> - 1.12.20-1
+- update to 1.12.20
+- fix Source0 URL
+- security fixes for CVE-2016-4861 and CVE-2016-6233
+- please note that this will most likely be the last version of this package as
+  it has been EOLd by upstream
+
+* Sun Jul  3 2016 Remi Collet <RPMS@FamilleCollet.com> - 1.12.18-3
+- php-ZendFramework-Db-Adapter-Pdo-Mssql requires pdo_dblib (not mssql)
+
+* Fri Jul  1 2016 Remi Collet <RPMS@FamilleCollet.com> - 1.12.18-2
+- php-ZendFramework-Db-Adapter-Pdo-Mysql requires pdo_mysql (not mysql)
+
+* Sat Apr 30 2016 Robert Scheck <robert@fedoraproject.org> - 1.12.18-1
+- update to 1.12.18 (#1328032)
+
+* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.12.16-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Sun Oct 11 2015 Felix Kaechele <heffer@fedoraproject.org> - 1.12.16-1
+- update to 1.12.16
+- fixes CVE-2015-5161: http://framework.zend.com/security/advisory/ZF2015-06
+- fixes CVE-2015-5723: http://framework.zend.com/security/advisory/ZF2015-07
+- removed services: DeveloperGarden, Technorati
+
+* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.12.13-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Wed May 20 2015 Remi Collet <RPMS@FamilleCollet.com> - 1.12.13-1
+- update to 1.12.13
+- add composer provides
+
+* Tue Feb 24 2015 Felix Kaechele <heffer@fedoraproject.org> - 1.12.11-1
+- update to 1.12.11
+
+* Tue Oct 07 2014 Felix Kaechele <heffer@fedoraproject.org> - 1.12.9-1
+- update to 1.12.9
+- fixes http://framework.zend.com/security/advisory/ZF2014-05
+- fixes http://framework.zend.com/security/advisory/ZF2014-06
+
+* Sat Jul 12 2014 Felix Kaechele <felix@fetzig.org> - 1.12.7-1
+- update to 1.12.7
+- fixes http://framework.zend.com/security/advisory/ZF2014-04 / CVE-2014-4914
+
 * Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.12.5-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

0001-Add-shebang-and-set-absolute-path-to-PHP-file.patch Added

ZendFramework-1.12.5.tar.gz -> ZendFramework-1.12.20.tar.gz Changed

debian.changelog Added

@@ -0,0 +1,412 @@
+zendframework (1.12.20+dfsg-1~kolab1) unstable; urgency=medium
+
+  * Package for Kolab
+
+ -- Christoph Erhardt <kolab@sicherha.de>  Sat, 05 May 2018 08:46:10 +0200
+
+zendframework (1.12.20+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * Preparation for 1.12.20
+
+  [ David Prévot ]
+  * Document now assigned CVE in previous changelog entry
+
+  [ Enrico Zimuel ]
+  * Fixed SQL Injection in order and group
+
+ -- David Prévot <taffit@debian.org>  Sat, 10 Sep 2016 11:33:39 -1000
+
+zendframework (1.12.19+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * Added EOL announcement to README and CONTRIBUTING guide
+  * Prepared for 1.12.19 release
+
+  [ Enrico Zimuel ]
+  * Fixed potential SQL injections in order() and group() [CVE-2016-6233]
+
+ -- David Prévot <taffit@debian.org>  Fri, 15 Jul 2016 15:14:39 -0400
+
+zendframework (1.12.18+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * 1.12.18 preparations
+
+  [ Enrico Zimuel ]
+  * Fixed the rand usage
+
+  [ Frank Brückner ]
+  * Removes Zend_Gdata_YouTube which is based on Data API v2
+
+  [ David Prévot ]
+  * Update Standards-Version to 3.9.8
+
+ -- David Prévot <taffit@debian.org>  Wed, 13 Apr 2016 16:57:00 -0400
+
+zendframework (1.12.17+dfsg-2) unstable; urgency=medium
+
+  * PHP 7.0 transition:
+    - Update php5-* dependencies to php-*
+    - Suggest other php- extensions no longer builtin
+    - Rebuild with latest pkg-php-tools
+  * Drop ownCloud for Debian maintainers from uploaders
+  * Update Standards-Version to 3.9.7
+
+ -- David Prévot <taffit@debian.org>  Sat, 05 Mar 2016 10:32:52 -0400
+
+zendframework (1.12.17+dfsg-1) unstable; urgency=medium
+
+  [ Martin Hujer ]
+  * Zend_Validate_Hostname - updated TLD list to the version 2015102801
+
+  [ Enrico Zimuel ]
+  * Fixed the null byte test for Zend_Db_Adapter_Pdo
+  * ZF2015-09: Fixed entropy issue in word CAPTCHA
+
+ -- David Prévot <taffit@debian.org>  Mon, 23 Nov 2015 21:57:00 -0400
+
+zendframework (1.12.16+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * [ZF2015-07] Use umask of 0002 [CVE-2015-5723]
+  * [1.12.16] release readiness
+
+  [ Enrico Zimuel ]
+  * [ZF2015-08] Fix null byte injection for PDO MsSql [CVE-2014-8089]
+
+ -- David Prévot <taffit@debian.org>  Wed, 16 Sep 2015 08:08:40 -0400
+
+zendframework (1.12.15+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * [1.12.15] Release readinesss
+
+ -- David Prévot <taffit@debian.org>  Sat, 29 Aug 2015 15:58:10 -0400
+
+zendframework (1.12.14+dfsg-1) unstable; urgency=medium
+
+  [ Frank Brückner ]
+  * Classes for Technorati removed
+
+  [ Matthew Weier O'Phinney ]
+  * [ZF2015-06] Fix potential XXE vector via BOM detection [CVE-2015-5161]
+
+  [ Martin Hujer ]
+  * Drop DeveloperGarden API implementation as it shuts down on 30th June 2015
+
+ -- David Prévot <taffit@debian.org>  Tue, 11 Aug 2015 09:34:58 +0200
+
+zendframework (1.12.13+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * Cast int and float to string when creating headers
+  * [1.12.13] Release readiness
+
+ -- David Prévot <taffit@debian.org>  Wed, 20 May 2015 12:09:09 -0400
+
+zendframework (1.12.12+dfsg-1) unstable; urgency=high
+
+  * Upload to unstable, with high urgency because of the security fix
+
+  [ Matthew Weier O'Phinney ]
+  * [ZF2015-04] Fix CRLF injections in HTTP and Mail [CVE-2015-3154]
+  * [1.12.12] Release readiness
+
+ -- David Prévot <taffit@debian.org>  Tue, 19 May 2015 14:56:04 -0400
+
+zendframework (1.12.11+dfsg-1) experimental; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * Promoted to stable version 1.12.11
+
+  [ Frank Brückner ]
+  * Adds condition in ViewRenderer action helper
+
+ -- David Prévot <taffit@debian.org>  Tue, 17 Feb 2015 19:53:26 -0400
+
+zendframework (1.12.10+dfsg-1) experimental; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * [1.12.10] release preparation
+
+  [ Rob Allen ]
+  * Update copyright to 2015.
+
+  [ David Prévot ]
+  * Update copyright
+  * Simplify rules
+  * Add upstream changelog
+  * Upload to experimental to respect the freeze
+
+ -- David Prévot <taffit@debian.org>  Fri, 23 Jan 2015 15:18:20 -0400
+
+zendframework (1.12.9+dfsg-2) unstable; urgency=medium
+
+  * Revert tests during package build (Closes: #765155)
+  * Use repacksuffix feature of uscan
+
+ -- David Prévot <taffit@debian.org>  Mon, 13 Oct 2014 22:40:34 -0400
+
+zendframework (1.12.9+dfsg-1) unstable; urgency=medium
+
+  [ Matthew Weier O'Phinney ]
+  * [ZF2014-05] Fix for null-byte binding
+  * [#372] Quote null byte characters
+  * [1.12.9] Release readiness
+
+  [ David Prévot ]
+  * Bump standards version to 3.9.6
+
+ -- David Prévot <taffit@debian.org>  Thu, 18 Sep 2014 20:28:35 -0400
+
+zendframework (1.12.8+dfsg-1) unstable; urgency=medium
+
+  * Imported Upstream version 1.12.8+dfsg (Closes: #759575)
+  * Exclude sourceless and non-free files from source
+  * Add watch file and get-orig-source target
+  * debian/patches:
+    - Handle with gbp pq
+    - Add patches to run tests
+  * debian/rules:
+    - Use php for section
+    - Maintain package in the PHP PEAR Maintainers team
+    - Declare Vcs-* entries
+    - Bump standards version to 3.9.5
+  * Use format 3.0 (quilt) instead of quilt
+  * Update copyright in format 1.0
+  * Use pkg-php-tools Composer helper
+  * Run tests during package build
+  * Use fonts from ttf-bitstream-vera for tests
+
+ -- David Prévot <taffit@debian.org>  Wed, 03 Sep 2014 17:02:50 -0400
+
+zendframework (1.12.7-0.1) unstable; urgency=medium
+
+  * Non-maintainer upload
+  * New upstream release, fixes a security issue (Closes: #754201):
+    - ZF2014-04: Potential SQL injection in the ORDER implementation of
+      Zend_Db_Select
+      http://framework.zend.com/security/advisory/ZF2014-04
+
+ -- David Prévot <taffit@debian.org>  Tue, 08 Jul 2014 12:33:40 -0400
+
+zendframework (1.12.5-0.1) unstable; urgency=medium
+
+  * Non-maintainer upload
+  * New upstream release, fixes several security issues (Closes: #743175):
+    - ZF2014-01: Potential XXE/XEE attacks using PHP functions:
+      simplexml_load_*, DOMDocument::loadXML, and xml_parse

debian.control Added

@@ -0,0 +1,62 @@
+Source: zendframework
+Section: php
+Priority: optional
+Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
+Uploaders: Frank Habermann <lordlamer@lordlamer.de>,
+           David Prévot <taffit@debian.org>
+Build-Depends: debhelper (>= 7.0.50), pkg-php-tools (>= 1.7~)
+Standards-Version: 3.9.8
+Homepage: http://framework.zend.com
+Vcs-Git: git://anonscm.debian.org/pkg-php/zendframework.git
+Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-php/zendframework.git
+
+Package: zendframework
+Architecture: all
+Depends: ${misc:Depends}, ${phpcomposer:Debian-require}
+Suggests: php-bcmath,
+          php-bz2,
+          php-curl,
+          php-gd,
+          php-imap,
+          php-json,
+          php-ldap,
+          php-mbstring,
+          php-mysql,
+          php-pgsql,
+          php-soap,
+          php-sqlite3,
+          php-xml,
+          php-zip,
+          ${phpcomposer:Debian-suggest}
+Replaces: ${phpcomposer:Debian-replace}
+Breaks: ${phpcomposer:Debian-conflict}, ${phpcomposer:Debian-replace}
+Provides: zend-framework, ${phpcomposer:Debian-provide}
+Description: powerful PHP framework
+ Extending the art & spirit of PHP, Zend Framework is based on simplicity,
+ object-oriented best practices, corporate friendly licensing, and a rigorously
+ tested agile codebase. Zend Framework is focused on building more secure,
+ reliable, and modern Web 2.0 applications & web services, and consuming widely
+ available APIs from leading vendors like Google, Amazon, Yahoo!, Flickr, as
+ well as API providers and cataloguers like StrikeIron and ProgrammableWeb.
+
+Package: zendframework-bin
+Architecture: all
+Depends: php-cli, zendframework, ${misc:Depends}
+Description: binary scripts for zendframework
+ Extending the art & spirit of PHP, Zend Framework is based on simplicity,
+ object-oriented best practices, corporate friendly licensing, and a rigorously
+ tested agile codebase. Zend Framework is focused on building more secure,
+ reliable, and modern Web 2.0 applications & web services, and consuming widely
+ available APIs from leading vendors like Google, Amazon, Yahoo!, Flickr, as
+ well as API providers and cataloguers like StrikeIron and ProgrammableWeb.
+
+Package: zendframework-resources
+Architecture: all
+Depends: zendframework, ${misc:Depends}
+Description: resource scripts for zendframework
+ Extending the art & spirit of PHP, Zend Framework is based on simplicity,
+ object-oriented best practices, corporate friendly licensing, and a rigorously
+ tested agile codebase. Zend Framework is focused on building more secure,
+ reliable, and modern Web 2.0 applications & web services, and consuming widely
+ available APIs from leading vendors like Google, Amazon, Yahoo!, Flickr, as
+ well as API providers and cataloguers like StrikeIron and ProgrammableWeb.

debian.rules Added

debian.series Added

debian.tar.gz Added

php-ZendFramework.dsc Added

Changes of Revision 2