- [575: Please Remove YouTube Zend GData Page](https://github.com/zendframework/zf1/issues/575)
- [607: PHP7 debug_backtrace BC break](https://github.com/zendframework/zf1/issues/607)
- [628: Solve problem with subqueries in SELECT block](https://github.com/zendframework/zf1/pull/628)
- [637: List-separator attribute is not being unset for MultiCheckboxes due to a typo.](https://github.com/zendframework/zf1/issues/637)
- [641: Wrong regex pattern in Zend_Validate_Iban class](https://github.com/zendframework/zf1/issues/641)
- [647: VERSION constant incorrect for 1.12.17 release tag.](https://github.com/zendframework/zf1/issues/647)
- [649: ZF2015-09: The Zend_Crypt_MathTest should run on PHP 5.2/5.3](https://github.com/zendframework/zf1/pull/649)
- [651: Update Vagrantfile to use Rasmus' php7 box](https://github.com/zendframework/zf1/pull/651)
- [655: ZF2015-08 breaks binary data ](https://github.com/zendframework/zf1/issues/655)
- [656: zf1-extra is missing in release-1.12.17](https://github.com/zendframework/zf1/issues/656)
- [670: Fix for 655 issue](https://github.com/zendframework/zf1/pull/670)
- [677: Wrong PHPDoc in Zend_Mail](https://github.com/zendframework/zf1/issues/677)
- [679: Non-existing method getRequired() in Zend_Form-Elements docs](https://github.com/zendframework/zf1/issues/679)
- [683: Zend_Form_Element_Button::isChecked has wrong documentation](https://github.com/zendframework/zf1/issues/683)

SECURITY UPDATES
----------------

- **ZF2016-01**: A number of classes, including `Zend_Filter_Encrypt`, `Zend_Form_Element_Hash`, `Zend_Gdata_HttpClient`, `Zend_Ldap_Attribute`, and `Zend_OpenId`, were using randomization methods with insufficient entropy.  They have been updated to each use `Zend_Crypt_Math`, and the latter was updated to use PHP 7's `random_bytes()` and `random_int()` where feasible.