php7.0 (7.0.15-0ubuntu0.16.10.4) yakkety-security; urgency=medium

  * SECURITY REGRESSION: large mysql requests broken (LP: #1668017)
    - debian/patches/fix_74021.patch: fix fetch_array with more than
      MEDIUMBLOB in ext/mysqlnd/mysqlnd_wireprotocol.c, added tests to
      ext/mysqli/tests/bug73800.phpt, ext/mysqli/tests/bug74021.phpt.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 01 Mar 2017 10:50:27 -0500

php7.0 (7.0.15-0ubuntu0.16.10.2) yakkety-security; urgency=medium

  * No change rebuild in the -security pocket.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 23 Feb 2017 08:42:19 -0500

php7.0 (7.0.15-0ubuntu0.16.10.1) yakkety; urgency=medium

  * New upstream release
    - LP: #1663405
    - Refresh patches for new upstream release.
  * debian/patches/0048-Fix-pdo_pgsql.patch: Fixed #73959 - lastInsertId
    fails to throw an exception in pdsql.  Thanks to andrewnester
    <andrew.nester.dev@gmail.com>.  Closes LP: #1658289.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Tue, 14 Feb 2017 14:44:43 -0800

php7.0 (7.0.13-0ubuntu0.16.10.1) yakkety; urgency=medium

  * New upstream release
    - LP: #1645431
    - Refresh patches for new upstream release.
  * Drop:
    - SECURITY UPDATE: proxy request header vulnerability (httpoxy)
      + debian/patches/CVE-2016-5385.patch: only use HTTP_PROXY from the
        local environment in ext/standard/basic_functions.c, main/SAPI.c,
        main/php_variables.c.
      + CVE-2016-5385
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: inadequate error handling in bzread()
      + debian/patches/CVE-2016-5399.patch: do not allow reading past error
        read in ext/bz2/bz2.c.
      + CVE-2016-5399
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: integer overflow in the virtual_file_ex function
      + debian/patches/CVE-2016-6289.patch: properly check path_length in
        Zend/zend_virtual_cwd.c.
      + CVE-2016-6289
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: use after free in unserialize() with unexpected
      session deserialization
      + debian/patches/CVE-2016-6290.patch: destroy var_hash properly in
        ext/session/session.c, added test to ext/session/tests/bug72562.phpt.
      + CVE-2016-6290
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: out of bounds read in exif_process_IFD_in_MAKERNOTE
      + debian/patches/CVE-2016-6291.patch: add more bounds checks to
        ext/exif/exif.c.
      + CVE-2016-6291
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: NULL pointer dereference in exif_process_user_comment
      + debian/patches/CVE-2016-6292.patch: properly handle encoding in
        ext/exif/exif.c.
      + CVE-2016-6292
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: locale_accept_from_http out-of-bounds access
      + debian/patches/CVE-2016-6294.patch: check length in
        ext/intl/locale/locale_methods.c, added test to
        ext/intl/tests/bug72533.phpt.
      + CVE-2016-6294
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: use after free vulnerability in SNMP with GC and
      unserialize()
      + debian/patches/CVE-2016-6295.patch: add new handler to
        ext/snmp/snmp.c, add test to ext/snmp/tests/bug72479.phpt.
      + CVE-2016-6295
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: heap buffer overflow in simplestring_addn
      + debian/patches/CVE-2016-6296.patch: prevent overflows in
        ext/xmlrpc/libxmlrpc/simplestring.*.
      + CVE-2016-6296
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: integer overflow in php_stream_zip_opener
      + debian/patches/CVE-2016-6297.patch: use size_t in
        ext/zip/zip_stream.c.
      + CVE-2016-6297
      [ Fixed in 7.0.9 ]
    - debian/patches/fix_exif_tests.patch: fix exif test results after
      security changes.
      [ Fixed in 7.0.9 ]
    - SECURITY UPDATE: denial of service or code execution via crafted
      serialized data
      + debian/patches/CVE-2016-7124.patch: fix unserializing logic in
        ext/session/session.c, ext/standard/var_unserializer.c*,
        ext/wddx/wddx.c, added tests to
        ext/standard/tests/serialize/bug72663.phpt,
        ext/standard/tests/serialize/bug72663_2.phpt,
        ext/standard/tests/serialize/bug72663_3.phpt.
      + CVE-2016-7124
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: arbitrary-type session data injection
      + debian/patches/CVE-2016-7125.patch: consume data even if not storing
        in ext/session/session.c, added test to
        ext/session/tests/bug72681.phpt.
      + CVE-2016-7125
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution in
      imagegammacorrect function
      + debian/patches/CVE-2016-7127.patch: check gamma values in
        ext/gd/gd.c, added test to ext/gd/tests/bug72730.phpt.
      + CVE-2016-7127
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: information disclosure via exif_process_IFD_in_TIFF
      + debian/patches/CVE-2016-7128.patch: properly handle thumbnails in
        ext/exif/exif.c.
      + CVE-2016-7128
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      invalid ISO 8601 time value
      + debian/patches/CVE-2016-7129.patch: properly handle strings in
        ext/wddx/wddx.c, added test to ext/wddx/tests/bug72749.phpt.
      + CVE-2016-7129
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      invalid base64 binary value
      + debian/patches/CVE-2016-7130.patch: properly handle string in
        ext/wddx/wddx.c, added test to ext/wddx/tests/bug72750.phpt.
      + CVE-2016-7130
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      malformed wddxPacket XML document
      + debian/patches/CVE-2016-7131.patch: added checks to ext/wddx/wddx.c,
        added tests to ext/wddx/tests/bug72790.phpt,
        ext/wddx/tests/bug72799.phpt.
      + CVE-2016-7131
      + CVE-2016-7132
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      long pathname
      + debian/patches/CVE-2016-7133.patch: fix memory allocator in
        Zend/zend_alloc.c.
      + CVE-2016-7133
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      long string and curl_escape call
      + debian/patches/CVE-2016-7134.patch: check both curl_escape and
        curl_unescape in ext/curl/interface.c.
      + CVE-2016-7134
      [ Fixed in 7.0.10 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      crafted field metadata in MySQL driver
      + debian/patches/CVE-2016-7412.patch: validate field length in
        ext/mysqlnd/mysqlnd_wireprotocol.c.
      + CVE-2016-7412
      [ Fixed in 7.0.11 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      malformed wddxPacket XML document
      + debian/patches/CVE-2016-7413.patch: fixed use-after-free in
        ext/wddx/wddx.c, added test to ext/wddx/tests/bug72860.phpt.
      + CVE-2016-7413
      [ Fixed in 7.0.11 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      crafted PHAR archive
      + debian/patches/CVE-2016-7414.patch: validate signatures in
        ext/phar/util.c, ext/phar/zip.c.
      + CVE-2016-7414
      [ Fixed in 7.0.11 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      MessageFormatter::formatMessage call with a long first argument
      + debian/patches/CVE-2016-7416.patch: added locale length check to
        ext/intl/msgformat/msgformat_format.c.
      + CVE-2016-7416
      [ Fixed in 7.0.11 ]
    - SECURITY UPDATE: denial of service or code execution via crafted
      serialized data
      + debian/patches/CVE-2016-7417.patch: added type check to
        ext/spl/spl_array.c, added test to ext/spl/tests/bug73029.phpt, fix
        test in ext/spl/tests/bug70068.phpt.
      + CVE-2016-7417
      [ Fixed in 7.0.11 ]
    - SECURITY UPDATE: denial of service and possible code execution via
      malformed wddxPacket XML document
      + debian/patches/CVE-2016-7418.patch: fix out-of-bounds read in
        ext/wddx/wddx.c, added test to ext/wddx/tests/bug73065.phpt.
      + CVE-2016-7418
      [ Fixed in 7.0.11 ]

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Mon, 28 Nov 2016 12:14:42 -0800

php7.0 (7.0.8-3ubuntu3) yakkety; urgency=medium

  * SECURITY UPDATE: denial of service or code execution via crafted
    serialized data
    - debian/patches/CVE-2016-7124.patch: fix unserializing logic in
      ext/session/session.c, ext/standard/var_unserializer.c*,
      ext/wddx/wddx.c, added tests to
      ext/standard/tests/serialize/bug72663.phpt,
      ext/standard/tests/serialize/bug72663_2.phpt,
      ext/standard/tests/serialize/bug72663_3.phpt.
    - CVE-2016-7124
  * SECURITY UPDATE: arbitrary-type session data injection
    - debian/patches/CVE-2016-7125.patch: consume data even if not storing
      in ext/session/session.c, added test to
      ext/session/tests/bug72681.phpt.
    - CVE-2016-7125
  * SECURITY UPDATE: denial of service and possible code execution in
    imagegammacorrect function
    - debian/patches/CVE-2016-7127.patch: check gamma values in
      ext/gd/gd.c, added test to ext/gd/tests/bug72730.phpt.
    - CVE-2016-7127
  * SECURITY UPDATE: information disclosure via exif_process_IFD_in_TIFF
    - debian/patches/CVE-2016-7128.patch: properly handle thumbnails in
      ext/exif/exif.c.
    - CVE-2016-7128
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid ISO 8601 time value
    - debian/patches/CVE-2016-7129.patch: properly handle strings in
      ext/wddx/wddx.c, added test to ext/wddx/tests/bug72749.phpt.
    - CVE-2016-7129
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid base64 binary value
    - debian/patches/CVE-2016-7130.patch: properly handle string in
      ext/wddx/wddx.c, added test to ext/wddx/tests/bug72750.phpt.
    - CVE-2016-7130
  * SECURITY UPDATE: denial of service and possible code execution via
    malformed wddxPacket XML document
    - debian/patches/CVE-2016-7131.patch: added checks to ext/wddx/wddx.c,
      added tests to ext/wddx/tests/bug72790.phpt,
      ext/wddx/tests/bug72799.phpt.
    - CVE-2016-7131
    - CVE-2016-7132
  * SECURITY UPDATE: denial of service and possible code execution via
    long pathname
    - debian/patches/CVE-2016-7133.patch: fix memory allocator in
      Zend/zend_alloc.c.
    - CVE-2016-7133
  * SECURITY UPDATE: denial of service and possible code execution via
    long string and curl_escape call
    - debian/patches/CVE-2016-7134.patch: check both curl_escape and
      curl_unescape in ext/curl/interface.c.
    - CVE-2016-7134
  * SECURITY UPDATE: denial of service and possible code execution via
    crafted field metadata in MySQL driver
    - debian/patches/CVE-2016-7412.patch: validate field length in
      ext/mysqlnd/mysqlnd_wireprotocol.c.
    - CVE-2016-7412
  * SECURITY UPDATE: denial of service and possible code execution via
    malformed wddxPacket XML document
    - debian/patches/CVE-2016-7413.patch: fixed use-after-free in
      ext/wddx/wddx.c, added test to ext/wddx/tests/bug72860.phpt.
    - CVE-2016-7413
  * SECURITY UPDATE: denial of service and possible code execution via
    crafted PHAR archive
    - debian/patches/CVE-2016-7414.patch: validate signatures in
      ext/phar/util.c, ext/phar/zip.c.
    - CVE-2016-7414
  * SECURITY UPDATE: denial of service and possible code execution via
    MessageFormatter::formatMessage call with a long first argument
    - debian/patches/CVE-2016-7416.patch: added locale length check to
      ext/intl/msgformat/msgformat_format.c.
    - CVE-2016-7416
  * SECURITY UPDATE: denial of service or code execution via crafted
    serialized data
    - debian/patches/CVE-2016-7417.patch: added type check to
      ext/spl/spl_array.c, added test to ext/spl/tests/bug73029.phpt, fix
      test in ext/spl/tests/bug70068.phpt.
    - CVE-2016-7417
  * SECURITY UPDATE: denial of service and possible code execution via
    malformed wddxPacket XML document
    - debian/patches/CVE-2016-7418.patch: fix out-of-bounds read in
      ext/wddx/wddx.c, added test to ext/wddx/tests/bug73065.phpt.
    - CVE-2016-7418

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 03 Oct 2016 15:48:48 -0400

php7.0 (7.0.8-3ubuntu2) yakkety; urgency=medium

  * SECURITY UPDATE: proxy request header vulnerability (httpoxy)
    - debian/patches/CVE-2016-5385.patch: only use HTTP_PROXY from the
      local environment in ext/standard/basic_functions.c, main/SAPI.c,
      main/php_variables.c.
    - CVE-2016-5385
  * SECURITY UPDATE: inadequate error handling in bzread()
    - debian/patches/CVE-2016-5399.patch: do not allow reading past error
      read in ext/bz2/bz2.c.
    - CVE-2016-5399
  * SECURITY UPDATE: integer overflow in the virtual_file_ex function
    - debian/patches/CVE-2016-6289.patch: properly check path_length in
      Zend/zend_virtual_cwd.c.
    - CVE-2016-6289
  * SECURITY UPDATE: use after free in unserialize() with unexpected
    session deserialization
    - debian/patches/CVE-2016-6290.patch: destroy var_hash properly in
      ext/session/session.c, added test to ext/session/tests/bug72562.phpt.
    - CVE-2016-6290
  * SECURITY UPDATE: out of bounds read in exif_process_IFD_in_MAKERNOTE
    - debian/patches/CVE-2016-6291.patch: add more bounds checks to
      ext/exif/exif.c. 
    - CVE-2016-6291
  * SECURITY UPDATE: NULL pointer dereference in exif_process_user_comment
    - debian/patches/CVE-2016-6292.patch: properly handle encoding in
      ext/exif/exif.c.
    - CVE-2016-6292
  * SECURITY UPDATE: locale_accept_from_http out-of-bounds access
    - debian/patches/CVE-2016-6294.patch: check length in
      ext/intl/locale/locale_methods.c, added test to
      ext/intl/tests/bug72533.phpt.
    - CVE-2016-6294
  * SECURITY UPDATE: use after free vulnerability in SNMP with GC and
    unserialize()
    - debian/patches/CVE-2016-6295.patch: add new handler to
      ext/snmp/snmp.c, add test to ext/snmp/tests/bug72479.phpt.
    - CVE-2016-6295
  * SECURITY UPDATE: heap buffer overflow in simplestring_addn
    - debian/patches/CVE-2016-6296.patch: prevent overflows in
      ext/xmlrpc/libxmlrpc/simplestring.*.
    - CVE-2016-6296
  * SECURITY UPDATE: integer overflow in php_stream_zip_opener
    - debian/patches/CVE-2016-6297.patch: use size_t in
      ext/zip/zip_stream.c.
    - CVE-2016-6297
  * debian/patches/fix_exif_tests.patch: fix exif test results after
    security changes.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 27 Jul 2016 08:14:20 -0400

php7.0 (7.0.8-3ubuntu1) yakkety; urgency=low

  * Merge with Debian unstable (LP: #1596735). Remaining changes:
    - Drop dh-php from Recommends to Suggests so it can be demoted to
      universe (LP: #1590623).
      + dh-php has gained a dependency on xml2 which is in universe.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Mon, 27 Jun 2016 16:33:17 -0700

php7.0 (7.0.8-3) unstable; urgency=medium

  [ Ondřej Surý ]
  * Improve libapache2-mod-php script to switch MPM only on fresh installs
  * libapache2-mod-phpX.Y now recommends apache2 package (as this is what
    most people want anyway)

  [ Marc Deslauriers ]
  * Re-enable test suite

  [ Ondřej Surý ]
  * Update d/setup-mysql.sh to support MySQL 5.5, 5.6 and 5.7 and
    build-depend on libnss-myhostname so mysql_install_db --force option
    is not needed

 -- Ondřej Surý <ondrej@debian.org>  Wed, 29 Jun 2016 11:11:39 +0200

php7.0 (7.0.8-2) unstable; urgency=medium

  [ Thomas Häber ]
  * fix typo in Tighten depends on pcre3 to workaround symbols brokeness

 -- Ondřej Surý <ondrej@debian.org>  Fri, 24 Jun 2016 13:41:57 +0200

php7.0 (7.0.8-1) unstable; urgency=medium

  * Tighten depends on pcre3 to workaround symbols brokeness
  * Imported Upstream version 7.0.8
  * Rebase patches on top of 7.0.8 release
  * Adjust tidy extension for tidy-html5

 -- Ondřej Surý <ondrej@debian.org>  Fri, 24 Jun 2016 08:22:40 +0200

php7.0 (7.0.7-5) unstable; urgency=medium

  * Add Breaks: gforge-common (<< 6) to php7.0-common (Closes: #827413)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 16 Jun 2016 09:00:25 +0200

php7.0 (7.0.7-4ubuntu2) yakkety; urgency=medium

  * Actually drop dh-php from Recommends to Suggests by modifying
    d/control.in as well (LP: #1590623).

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Thu, 09 Jun 2016 19:56:16 -0700

php7.0 (7.0.7-4ubuntu1) yakkety; urgency=medium

  * Drop dh-php from Recommends to Suggests so it can be demoted to
    universe (LP: #1590623).
    - dh-php has gained a dependency on xml2 which is in universe.

 -- Nishanth Aravamudan <nish.aravamudan@canonical.com>  Wed, 08 Jun 2016 17:13:12 -0700

php7.0 (7.0.7-4) unstable; urgency=medium

  * Don't break apache2 configuration if setenvif_module is not enabled
    (Closes: #825933)
  * Add notice about apache2 notices when apache2 package is installed

 -- Ondřej Surý <ondrej@debian.org>  Fri, 03 Jun 2016 13:22:25 +0200

php7.0 (7.0.7-3) unstable; urgency=medium

  * The alternative base-files dependency to *systemd* deps is also
    required only on linux-any

 -- Ondřej Surý <ondrej@debian.org>  Fri, 27 May 2016 13:21:07 +0200

php7.0 (7.0.7-2) unstable; urgency=medium

  * Drop ProtectSystem=full, PrivateTmp=full and PrivateDevices=true
    because it breaks some systems (Closes: #825499)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 27 May 2016 12:22:05 +0200

php7.0 (7.0.7-1) unstable; urgency=medium

  * Depend on json also in the embed and phpdbg SAPIs
  * Imported Upstream version 7.0.7
  * Refresh patches on top of 7.0.7 release

 -- Ondřej Surý <ondrej@debian.org>  Thu, 26 May 2016 14:08:13 +0200

php7.0 (7.0.6-13) unstable; urgency=medium

  * Don't enable PHP FPM by default since libapache2-mod-phpX.Y is the
    default choice now

 -- Ondřej Surý <ondrej@debian.org>  Thu, 19 May 2016 16:56:59 +0200

php7.0 (7.0.6-12) unstable; urgency=medium

  * Enable --restart-after-upgrade for both dh_installinit and
    dh_systemd_start to minimize downtimes
  * Add lintian override for erroneous
    missing-build-dependency-for-dh_-command
  * We need to modify d/tests.in/control for 'Not all environments are
    guaranteed to contain wget'

 -- Ondřej Surý <ondrej@debian.org>  Tue, 17 May 2016 15:06:43 +0200

php7.0 (7.0.6-11) unstable; urgency=medium

  [ Nishanth Aravamudan ]
  * Not all environments are guaranteed to contain wget.

  [ Ondřej Surý ]
  * Import upstream patch to fix segfault (core dumped) if paramno beyond
    bound

 -- Ondřej Surý <ondrej@debian.org>  Tue, 17 May 2016 10:11:35 +0200

php7.0 (7.0.6-10) unstable; urgency=medium

  * Multiple d/copyright updates

 -- Ondřej Surý <ondrej@debian.org>  Fri, 13 May 2016 16:25:54 +0200

php7.0 (7.0.6-9) unstable; urgency=medium

  [ Ondřej Surý ]
  * Offer libapache2-mod-phpX.Y as a first alternative in phpX.Y
    dependency (Closes: #822774)

  [ Mathieu Parent ]
  * Enable PHP FPM by default after install (Closes: #820282)
  * Only use fpm SetHandler when it works
  * Enable mod_proxy_fcgi for php-fpm

 -- Ondřej Surý <ondrej@debian.org>  Fri, 13 May 2016 09:05:18 +0200

php7.0 (7.0.6-8) unstable; urgency=medium

  * Restore dba extension package

 -- Ondřej Surý <ondrej@debian.org>  Thu, 12 May 2016 20:19:56 +0200

php7.0 (7.0.6-7) unstable; urgency=medium

  * Add more systemd features to protect host system (Closes: #823973)
  * Remove php-gettext from phpX.Y-common provides as it clashes with
    existing package (Closes: #823815)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 12 May 2016 10:47:10 +0200

php7.0 (7.0.6-6) unstable; urgency=medium

  [ Santiago Vila ]
  * "Arch: all" packages do not need the whole build process to be created
    (Closes: #823960)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 May 2016 21:14:22 +0200

php7.0 (7.0.6-5) unstable; urgency=medium

  * Remove php-fpm-checkconf as php-fpm often ends with zend_mm_heap
    corrupted that prevents th service to be (re)started

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 May 2016 18:48:30 +0200

php7.0 (7.0.6-4) unstable; urgency=medium

  * Upstart init script was missing /run/php creation
  * Disable systemd on Ubuntu 12.04 LTS
  * We require a more recent libzip-dev >= 1.0.0
  * Remove obsolete maintscript helper commands
  * We need libpcre3-dev (>= 8.20) for PCRE JIT support

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 May 2016 15:16:05 +0200

php7.0 (7.0.6-3) unstable; urgency=medium

  * Don't rely on greping the output, but use php-fpmX.Y -t return code to
    detect errors (Closes: #823784)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 09 May 2016 16:24:43 +0200

php7.0 (7.0.6-2) unstable; urgency=medium

  * Revert fix for PHP#71820 as it broke mysqli_fetch_object

 -- Ondřej Surý <ondrej@debian.org>  Mon, 09 May 2016 15:46:46 +0200

php7.0 (7.0.6-1) unstable; urgency=medium

  * Imported Upstream version 7.0.6
  * Rebase patches on top of 7.0.6 release

 -- Ondřej Surý <ondrej@debian.org>  Fri, 29 Apr 2016 12:14:25 +0200

php7.0 (7.0.5-4) unstable; urgency=medium

  [ Mathieu Parent ]
  * Fix lintian warnings:
    - Remove XS-Testsuite in control file
    - binary-control-field-duplicates-source field "priority" in package
      libphp7.0-embed
    - Use secure Vcs-* fields and move from gitweb to cgit
    - Copyright: fix timezone-database.patch name
    - Add documentation to php-fpm.service

  [ Ondřej Surý ]
  * Remove repack scripts, they are not needed for PHP 7.0 anymore
  * Install changelogs to indep packages
  * Debian PHPAPI stays same with ZTS and non-ZTS build
  * Instead of conflicting with old php5 packages, use dpkg-divert to move
    /usr/bin/phar away

 -- Ondřej Surý <ondrej@debian.org>  Wed, 27 Apr 2016 20:37:29 +0200

php7.0 (7.0.5-3) unstable; urgency=medium

  * Make phpX.Y binNMUable and kill the doc symlink (Closes: #821007)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 14 Apr 2016 16:07:15 +0200

php7.0 (7.0.5-2) unstable; urgency=medium

  * Restore php.ini templates since phpX.Y-common is arch:any

 -- Ondřej Surý <ondrej@debian.org>  Thu, 31 Mar 2016 18:57:55 +0200

php7.0 (7.0.5-1) unstable; urgency=medium

  [ Svante Signell ]
  * Fix ext/date/lib/parse_tz PATH_MAX HURD FTBFS (Closes:  #819627)

  [ Ondřej Surý ]
  * Split override_dh_install to indep and arch rules to allow sourceonly
    uploads (Closes: #819240)
  * Imported Upstream version 7.0.5
  * Rebase patches on top of 7.0.5

 -- Ondřej Surý <ondrej@debian.org>  Thu, 31 Mar 2016 14:52:48 +0200

php7.0 (7.0.4-7) unstable; urgency=medium

  * Add upstart init script for backport reasons
  * Add do_tmpfiles() call to php-fpm-checkconf to get consistent
    behaviour in all init systems
  * Fix use of UNDEF instead of NULL in read_dimension
    (Courtesy of Nikita Popov)
  * libphp-embed 'update-alternatives --remove' call needs to be in prerm
    script
  * Override maintainer-script-empty prerm in PHP extension packages
  * apache2-module-depends-on-real-apache2-package lintian-override needs
    to go in php-sapi.lintian-overrides to have any effect
  * Move embedded library fileinfo lintian-override to
    php-common.lintian-overrides.extra
  * Add missing #EXTRA# to php-module.lintian-overrides template

 -- Ondřej Surý <ondrej@debian.org>  Fri, 25 Mar 2016 17:25:41 +0100

php7.0 (7.0.4-6) unstable; urgency=medium

  * Add patch to fix segmentation fault in pcre running twig tests
  * Register libphp@PHP_MAJOR@.so with update-alternatives, so there's no
    dangling symbol in the piuparts
  * Really expand $libdir and $datadir before AC_SUBST to allow passing
    ${prefix} as part of --with-libdir
  * Don't reset module provides at every dsoname, but at every module name
  * Set PEAR_INSTALL_DIR manually to /usr/share/php even if we are not
    building PEAR, so PEAR have correct paths

 -- Ondřej Surý <ondrej@debian.org>  Mon, 14 Mar 2016 16:11:21 +0100

php7.0 (7.0.4-5) unstable; urgency=medium

  * Apply patch to make opcache lockfile path configurable
    (Courtesy of Gandi)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 09 Mar 2016 12:27:40 +0100

php7.0 (7.0.4-4) unstable; urgency=medium

  * Also kill old /etc/php/mods-available/zlib.ini
    (Closes: #817205, #817202)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 09 Mar 2016 10:08:25 +0100

php7.0 (7.0.4-3) unstable; urgency=medium

  * We need php_enable() in prerm script (Closes: #816763)
  * Force ucf and ucfr de-registration of old config files
  * ZLIB needs to be builtin module to support IMAGETYPE_SWC
  * Remove zlib extension from the list of extensions
  * php-common.preinst.extra was missing from d/prepare-files
  * Remove debian/ prefix from @package@ in prepared-files

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Mar 2016 16:12:42 +0100

php7.0 (7.0.4-2) unstable; urgency=medium

  * Replace libvpx-dev with libwebp-dev in ext-gd.mk
  * zlib extension needs to be enable as a module for all SAPIs to support
    IMAGETYPE_SWC

 -- Ondřej Surý <ondrej@debian.org>  Thu, 03 Mar 2016 20:52:13 +0100

php7.0 (7.0.4-1) unstable; urgency=medium

  * Imported Upstream version 7.0.4
  * Remove two patches already present in upstream
  * Rebase patches on top of 7.0.4 release
  * Remove ucfq part from prerm and postrm script that's not needed
    anymore (it was needed for dual mysql and mysqlnd modules)
  * Move php module deactivation back to postrm remove block
    (Closes: #816465)
  * Reorder SAPI cleanup scripts to properly disable PHP extensions

 -- Ondřej Surý <ondrej@debian.org>  Thu, 03 Mar 2016 11:41:57 +0100

php7.0 (7.0.3-13) unstable; urgency=medium

  * Check for old inidir existence before removing it (Closes: #816429)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 01 Mar 2016 21:32:09 +0100

php7.0 (7.0.3-12) unstable; urgency=medium

  * Turn comma into pipe to make fpm alternative to other web SAPIs

 -- Ondřej Surý <ondrej@debian.org>  Tue, 01 Mar 2016 17:33:03 +0100

php7.0 (7.0.3-11) unstable; urgency=medium

  * Move mods-available directories to /etc/php/X.Y/mods-available
  * Install missing php-module.preinst scripts

 -- Ondřej Surý <ondrej@debian.org>  Mon, 29 Feb 2016 12:35:55 +0100

php7.0 (7.0.3-10) unstable; urgency=medium

  * Don't enable PHP FPM by default
  * Fix non-expanded @EXTENSION_DIR@ in php-config

 -- Ondřej Surý <ondrej@debian.org>  Fri, 26 Feb 2016 10:39:12 +0100

php7.0 (7.0.3-9) unstable; urgency=medium

  * Replace makefile magic with shell for loop when iterating through SAPI
    build targets and enable parallel builds
  * Enable full Debian hardening
  * FORCE_CGI_REDIRECT and DISCARD_PATH doesn't exist anymore, so we just
    hardlink php-cgi7.0 to /usr/lib/cgi-bin/ for consistency with older
    releases
  * Use shared config.cache between different SAPI builds that speeds up
    dh_auto_configure step a lot

 -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Feb 2016 12:16:47 +0100

php7.0 (7.0.3-8) unstable; urgency=medium

  * Package zlib extension into phpX.Y-common

 -- Ondřej Surý <ondrej@debian.org>  Tue, 23 Feb 2016 17:45:41 +0100

php7.0 (7.0.3-7) unstable; urgency=medium

  * bz2 extension pulls libbz2-1.0, so it's better to have it in separate
    package
  * Remove PHPAPI version from lintian-overrides
  * Get rid of ${source:Version} everywhere
  * Add missing mysqlnd shared module back to phpX.Y-mysqlnd package
  * Fix php7.0 source: not-binnmuable-all-depends-any php7.0 -> php7.0-common
  * Merge php-<ext>:Provides into single line
  * Rename @modules@ to @extensions@ to make the d/rules less confusing
  * Disable module first before removing matching .ini file from
    /etc/php/mods-available
  * XML extension has to be loaded before WDDX or XMLRPC-EPI extensions

 -- Ondřej Surý <ondrej@debian.org>  Tue, 23 Feb 2016 14:13:18 +0100

php7.0 (7.0.3-6) unstable; urgency=medium

  [ Ondřej Surý ]
  * Add lintian override for faulty dh_apache2 (#796328)
  * Add support for dbgsym package
  * Use dsoname instead of module when building extension ini files
    (Courtesy of Miha Vrhovnik)
  * Move mysqlnd to mysql extension package
  * Split several compiled-in extensions to independent extension packages
  * Make several builtin extensions shared and move them into -common package
  * Add support for generated Replaces/Breaks/Conflicts/Provides for
    extension packages
  * Add missing php_enable to php-fpm postinst script
  * Disable built-in iconv support, leave only as shared extension

  [ Neal Gompa ]
  * Ensure php-fpm apache httpd config is prepared and installed
  * Fix the tests to pass and handle conditions that should fail properly
 
 -- Ondřej Surý <ondrej@debian.org>  Tue, 23 Feb 2016 07:49:00 +0100

php7.0 (7.0.3-5) unstable; urgency=medium

  [ Neal Gompa ]
  * Add a test for php-fpm

  [ Ondřej Surý ]
  * Don't depend directly on apache2
  * Add patch to fix crash because of VM stack corruption (DEB.SURY.ORG #246)
  * Miscelaneous fixes related to off-tree ZTS builds

 -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Feb 2016 11:19:55 +0100

php7.0 (7.0.3-4) unstable; urgency=medium

  * Resolve ltmain.sh link based on libtool version (Closes: #814271)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Feb 2016 12:41:07 +0100

php7.0 (7.0.3-3) unstable; urgency=medium

  [ Neal Gompa ]
  * Update php-cgi apache httpd config for phpX.Y
  * Add php-fpm apache httpd 2.4 configuration
  * Enable shmop php module

  [ Ondřej Surý ]
  * The autopkgtests are now generated from templates in tests.in inside
    debian/control rule
  * Include pregenerated tests in the source package
  * mod_phpX.c exports just major version in apache2 configuration

 -- Ondřej Surý <ondrej@debian.org>  Mon, 08 Feb 2016 11:50:20 +0100

php7.0 (7.0.3-2) unstable; urgency=medium

  * Add generic support for ZTS builds
  * Update systzdata patch to v13 and get php-bug62172.patch
    (Courtesy of Remi Collet's repository)
  * Remove extra 20-opcache.ini (Caused by fixed extension priority
    handling in src:php-defaults)

 -- Ondřej Surý <ondrej@debian.org>  Sat, 06 Feb 2016 15:27:55 +0100

php7.0 (7.0.3-1) unstable; urgency=medium

  * dh-php is unversioned
  * Imported Upstream version 7.0.3
  * Rebase patches on top of 7.0.3 release

 -- Ondřej Surý <ondrej@debian.org>  Fri, 05 Feb 2016 10:51:15 +0100

php7.0 (7.0.2-5) unstable; urgency=medium

  * Cleanup enabled modules even if php maintscript helpers are no longer
    installed (Closes: #807652, #810690)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 26 Jan 2016 10:19:20 +0100

php7.0 (7.0.2-4) unstable; urgency=medium

  * Unroll the update-alternatives loop in maintainer scripts
  * Add versioned Depends on php@PHP_VERSION@-readline instead of
    suggesting generic php-readline
  * For versioned modules invoke versioned call to php(en|dis)mod from
    maintainer scripts
  * Each phpX.Y-<sapi> now Provides php-<sapi> to make php-pear
    installable with src:php5.6

 -- Ondřej Surý <ondrej@debian.org>  Fri, 22 Jan 2016 11:05:23 +0100

php7.0 (7.0.2-3) unstable; urgency=medium

  * Fail gracefully when other PHP module is enabled in Apache2 (Closes: #811005)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 15 Jan 2016 09:47:27 +0100

php7.0 (7.0.2-2) unstable; urgency=medium

  * Fix log path in logrotate script
  * Merge patch for ODBC bug fix varchars returning with length zero
  * Fix php-config showing the installed package names instead of the
    SAPIs (Courtesy of Guillaume Plessis)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 14 Jan 2016 14:03:31 +0100

php7.0 (7.0.2-1) unstable; urgency=medium

  * Imported Upstream version 7.0.2
  * Rebase patches on top of 7.0.2

 -- Ondřej Surý <ondrej@debian.org>  Thu, 07 Jan 2016 16:05:30 +0100

php7.0 (7.0.1-6) unstable; urgency=medium

  * Add Conflicts: php5 stanza to php7.0.conf to hint a2enmod to not
    enable both PHP 5 and PHP 7 modules (Closes: #810117)
  * Build-Depend just on libpng-dev

 -- Ondřej Surý <ondrej@debian.org>  Thu, 07 Jan 2016 10:46:12 +0100

php7.0 (7.0.1-5) unstable; urgency=medium

  * Prepare for src:php5 and src:php7.0 coinstallation
  * Add empty php_enable to php-cgi postinst, so it's never enabled by default (Closes: #809967)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 05 Jan 2016 11:16:20 +0100

php7.0 (7.0.1-4) unstable; urgency=medium

  * Make Enchant, GMP and XSL extensions shared
  * Regenerate d/control

 -- Ondřej Surý <ondrej@debian.org>  Tue, 29 Dec 2015 14:12:09 +0100

php7.0 (7.0.1-3) unstable; urgency=medium

  * Compile with system PCRE library
  * Don't conflict with src:php5 transitional dummy packages

 -- Ondřej Surý <ondrej@debian.org>  Tue, 29 Dec 2015 09:49:46 +0100

php7.0 (7.0.1-2) unstable; urgency=medium

  * Remove phpX.Y-modules-source as it's not needed anymore  
  * Put back libsystemd-dev [linux-any] | libsystemd-daemon-dev
    [linux-any] into Build-Depends
  * Move sessiondir handling to php-common package from src:php-defaults

 -- Ondřej Surý <ondrej@debian.org>  Mon, 21 Dec 2015 11:08:53 +0100

php7.0 (7.0.1-1) unstable; urgency=medium

  * Enable XMLRPC-EPI extension
  * Imported Upstream version 7.0.1
  * Fix typo that prevented Interbase module to be built

 -- Ondřej Surý <ondrej@debian.org>  Fri, 18 Dec 2015 09:32:47 +0100

php7.0 (7.0.0-6) unstable; urgency=medium

  * Only one sysvrc script can provide php-fpm
  * Put both (5.x and 7.0) rules for FPM pools to one file with conditional
  * Enable bz2 extension

 -- Ondřej Surý <ondrej@debian.org>  Wed, 16 Dec 2015 13:04:46 +0100

php7.0 (7.0.0-5) unstable; urgency=medium

  * Re-enable mcrypt, readline and odbc extension
  * Enable parallel builds in d/rules

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Dec 2015 18:09:46 +0100

php7.0 (7.0.0-4) unstable; urgency=medium

  * Add Replaces: php5-cli to php7.0-cli (Closes: #799711)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Dec 2015 11:58:02 +0100

php7.0 (7.0.0-3) unstable; urgency=medium

  * Correctly set permissions on /var/lib/php/sessions (Closes: #807164)
  * Fix fpm service reload via systemd (Closes: #807163)
  * Update B-D to depend on libsystemd-dev | libsystemd-daemon-dev on
    linux (Closes: #807266)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Dec 2015 10:12:17 +0100

php7.0 (7.0.0-2) unstable; urgency=medium

  * Don't put $(INSTALL_ROOT) into phar.phar exec stanza (Closes: #807028)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 04 Dec 2015 15:54:10 +0100

php7.0 (7.0.0-1) unstable; urgency=medium

  * Update d/watch to match 7.0.*
  * Imported Upstream version 7.0.0
  * Rebase patches on top of 7.0.0 release

 -- Ondřej Surý <ondrej@debian.org>  Fri, 04 Dec 2015 09:51:59 +0100

php7.0 (7.0.0~rc8-3) experimental; urgency=medium

  * Move JSON ext to separate mk file and a separate package again
  * Re-enable Zend OpCache again and into a separate package

 -- Ondřej Surý <ondrej@debian.org>  Mon, 30 Nov 2015 09:27:58 +0100

php7.0 (7.0.0~rc8-2) experimental; urgency=medium

  * Enable CLI for all SAPIs to fix php-config

 -- Ondřej Surý <ondrej@debian.org>  Fri, 27 Nov 2015 10:50:57 +0100

php7.0 (7.0.0~rc8-1) experimental; urgency=medium

  * Imported Upstream version 7.0.0~rc8
  * Remove GD patch as we build the gd extension inside the source tree now
  * Build extensions as a part of the main PHP X.Y build tree

 -- Ondřej Surý <ondrej@debian.org>  Wed, 25 Nov 2015 11:13:16 +0100

php7.0 (7.0.0~rc6-1) experimental; urgency=medium

  * Imported Upstream version 7.0.0~rc6
  * Build extensions as a part of the main PHP build tree

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 Nov 2015 15:45:44 +0100

php7.0 (7.0.0~rc5-2) experimental; urgency=medium

  * Pull v12 version of systzdata patch from Redhat and merge the
    changes by Nikita Popov to stop the heap corruption
  * Copyright of ext/date/lib/ has changed to MIT/Expat

 -- Ondřej Surý <ondrej@debian.org>  Sun, 18 Oct 2015 02:17:02 +0200

php7.0 (7.0.0~rc5-1) experimental; urgency=medium

  * Imported Upstream version 7.0.0~rc5
  * Refresh patches on top of PHP 7.0.0~rc5
  * Bump phpapi to 20151012

 -- Ondřej Surý <ondrej@debian.org>  Fri, 16 Oct 2015 16:51:39 +0200

php7.0 (7.0.0~rc4-1) experimental; urgency=medium

  * Fix reading group from tmpfiles configuration
  * Imported Upstream version 7.0.0~rc4
  * Rebase patches on top of PHP 7.0.0~rc5

 -- Ondřej Surý <ondrej@debian.org>  Sun, 04 Oct 2015 16:24:14 +0200

php7.0 (7.0.0~rc3-3) experimental; urgency=medium

  * phar is just a symlink to phar.phar, so it needs special handling
    (GH#120)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 24 Sep 2015 09:39:42 +0200

php7.0 (7.0.0~rc3-2) experimental; urgency=medium

  * Declare Conflict on old *php5* binary packages as appropriate
    (Closes: #799711)
  * Make phar binaries and manpages versioned again

 -- Ondřej Surý <ondrej@debian.org>  Wed, 23 Sep 2015 10:16:27 +0200

php7.0 (7.0.0~rc3-1) experimental; urgency=medium

  * Imported Upstream version 7.0.0~rc3
  * Rebase patches on top of 7.0.0~rc3 release
  * Fix a wrong order of php and version in php7.0-cgi.postinst
    (Closes: #799424)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 18 Sep 2015 09:52:29 +0200

php7.0 (7.0.0~rc2-2) experimental; urgency=medium

  * Include local config.h in gd_compat.c to make gd_compat.c work
    properly when built outside of PHP tree (gh#111)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Sep 2015 13:26:14 +0200

php7.0 (7.0.0~rc2-1) experimental; urgency=medium

  * Explicitly enable iconv extension
  * Imported Upstream version 7.0.0~rc2
  * Rebase patches on top of 7.0.0~rc2 release
  * Fix compiled-in include_path (gh#112)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Sep 2015 12:40:17 +0200

php7.0 (7.0.0~rc1-1) experimental; urgency=medium

  [ Murukesh Mohanan ]
  * changes for common debian/; some minor fixes

  [ Ondřej Surý ]
  * Imported Upstream version 7.0.0~rc1
  * Refresh patches on top of 7.0.0~rc1 release

 -- Ondřej Surý <ondrej@debian.org>  Tue, 25 Aug 2015 14:19:59 +0200

php7.0 (7.0.0~beta3-5) experimental; urgency=medium

  * s/PHP_MAJOR_VERSION/PHP_MAJOR/ in apache2 .load file
  * The apache2-maintscript-helper function is called just as php_enable()

 -- Ondřej Surý <ondrej@debian.org>  Sun, 16 Aug 2015 14:42:02 +0200

php7.0 (7.0.0~beta3-4) experimental; urgency=medium

  * Fix the Apache2 module load script

 -- Ondřej Surý <ondrej@debian.org>  Sun, 16 Aug 2015 10:20:20 +0200

php7.0 (7.0.0~beta3-3) experimental; urgency=medium

  * Add missing stdin redirection that got php-fpm init script stuck

 -- Ondřej Surý <ondrej@debian.org>  Sun, 16 Aug 2015 10:16:58 +0200

php7.0 (7.0.0~beta3-2) experimental; urgency=medium

  * QDBM cannot be combined with GDBM
  * Disable system libzip (perhaps it will fix compilation issue on trusty)
  * Enable gettext, openssl and sockets extensions

 -- Ondřej Surý <ondrej@debian.org>  Thu, 13 Aug 2015 09:59:44 +0200

php7.0 (7.0.0~beta3-1) experimental; urgency=medium

  * Fix source package name in d/NEWS
  * Re-enable various base extensions back into core SAPIs
  * Disable xmlrpc as the build is broken
  * Install phar.phar (FIXME - add versioned phar.phar instead of single one)
  * Imported Upstream version 7.0.0~beta3
  * Refresh patches for PHP 7.0.0~beta3

 -- Ondřej Surý <ondrej@debian.org>  Mon, 10 Aug 2015 13:01:34 +0200

php7.0 (7.0.0~beta2-7) experimental; urgency=medium

  * Reorder overriden rules in dh_install so .default files are mangled
    and removed before dh_install run

 -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Aug 2015 09:02:36 +0200

php7.0 (7.0.0~beta2-6) experimental; urgency=medium

  * Enable libxml support since php-modules require php_libxml.h headers

 -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Aug 2015 08:57:49 +0200

php7.0 (7.0.0~beta2-5) experimental; urgency=medium

  * The include path in php-fpm was missing spaces around =
  * Use correct source files (and remove them after mangling them) for
    PHP-FPM configuration files

 -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Aug 2015 08:34:02 +0200

php7.0 (7.0.0~beta2-4) experimental; urgency=medium

  * Use proper name for php-fpm process, it's php-fpm@PHP_VERSION@

 -- Ondřej Surý <ondrej@debian.org>  Mon, 03 Aug 2015 08:22:34 +0200

php7.0 (7.0.0~beta2-3) experimental; urgency=medium

  * Disable PEAR building (that removes phar.phar as well)
  * Add patch to fix build on trusty i386 (Courtesy of ab@php.net)

 -- Ondřej Surý <ondrej@debian.org>  Sun, 02 Aug 2015 11:27:22 +0200

php7.0 (7.0.0~beta2-2) experimental; urgency=medium

  * Properly install new FPM www.conf to pool.d
  * Make use of tmpfiles (and add naive parser to phpX.Y-fpm.init)
  * Disable all extensions with --disable-all and remove the various
    configure options related to disabling the extensions

 -- Ondřej Surý <ondrej@debian.org>  Fri, 31 Jul 2015 14:08:17 +0200

php7.0 (7.0.0~beta2-1) experimental; urgency=medium

  * Initial packaging of PHP 7.0 - DON'T USE IN PRODUCTION
  * Imported Upstream version 7.0.0~beta2
  * Rebased patches on top of 7.0.0~beta2
  * Introduces complete rewrite of PHP packaging, so it might break horribly
  * Don't compile the PHP modules from this source package, but create
    phpX.Y-modules-source (Thanks Adam Conrad for the idea) that could be
    used to compiled modules from php-modules source package
  * Disable most compiled in modules except PDO, MySQLnd and OpenSSL
  * Move phpenmod, phpquery, php-maintscript-helper and sessionclean
    to php-common package
  * Make the copyright machine readable (it might not be complete, but
    it's much better than we have now in src:php5)
  * Add d/NEWS with prominent experimental notices
  * Use update-alternatives for phpdbg
  * Remove W3C validation icon from FPM status page to prevent privacy breach
  * cli SAPI has to be last target, so we get the right binary
  * Use parallel just for build targets
  * Fix binNMUability after switching phpX.Y-common to arch:all
  * Update lintian overrides for libphpX.Y-embed
  * Strip down the Build-Depends needed to build modules before
  * Tweak the dirs in d/patches to include 7.0 instead of 5 <- needs to be
    set from d/rules (FIXME)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 30 Jul 2015 11:39:57 +0200
