Comment 6 for bug 1582340

On 24.06.2016 [03:24:08 -0000], Jeremy Bicha wrote:
> drupal7 needs to depends on php-xml (bug 1595788)

Ack.

> In Debian testing and yakkety, php7.0 depends on libapache2-mod-php7.0
> (and with this installed, the installer works).

Well, to be clear, it depends on libapache2-mod-php7.0 in Xenial as
well, it's just the default choice that has changed (the first
alternative). This was actually done on purpose, as libapache2-mod-php
is not considered the best option (even if the most common).

> More precisely:
> 16.04: php7.0 depends on php7.0-fpm | libapache2-mod-php7.0
> 16.10: php7.0 depends on libapache2-mod-php7.0 | php7.0-fpm

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822774

There isn't a perfect solution. Probably you are right, we should toggle
the default selection back to apache, but then we'll get the same bugs
filed as before about nginx pulling in apache by default...

> For the purposes of this SRU, should we have drupal7 depend on
> libapache2-mod-php7.0...or, because I believe we should probably do it
> anyway, do an SRU for php7 to have that dependency added there?

I will add the above bugfix to an already pending PHP7.0 SRU request.

> Either way, I propose we replace this SRU with a new backport from
> yakkety of 7.44-1 and the php-xml dependency.

Given that yakkety is in sync with Debian, and probably there will be
more Drupal7 releases before it closes (and autosync is turned on), I'm
not sure it matters too much. Yes, there are security fixes that are
needed. But there are security issues in all drupal7 packages in Ubuntu,
and I don't think we're asserting they can all be fixed (cf. that trusty
is shipping 7.26-1 + 1 security release.