Re: #5963: Orphaned vulnerable packages in EPEL

[Fedora Release Engineering]

#5963: Orphaned vulnerable packages in EPEL
------------------------------+-----------------------
  Reporter:  sparks           |      Owner:  rel-eng@…
      Type:  task             |     Status:  reopened
 Milestone:  Fedora 20 Final  |  Component:  epel
Resolution:                   |   Keywords:  meeting
Blocked By:                   |   Blocking:
------------------------------+-----------------------

Comment (by till):

Here is a status update. I will update the comment after I checked other
 branches. Here is an update for EPEL5:

Replying to [comment:8 sparks]:
> Actually I see the following packages still in EPEL:
>
> mantis - epel-5[[BR]]

not orphaned since 2014-11-09

PoC: giallu (giallu, group::provenpackager, llaumgui, slankes)
> mod_wsgi - epel-5 [[BR]]

not orphaned since 2014-11-06

PoC: orion (group::provenpackager, jkaluza, jokajak, jorton, joshkayse,
 lmacken, orion)
> php-magpierss - epel-all [[BR]]
> php-suhosin - epel-all[[BR]]
> polipo - epel-6[[BR]]
> python26-mod_wsgi - epel-5 [[BR]]

Not orphaned since 2014-05-30

PoC: lmacken (group::provenpackager, lmacken)
> python26-simplejson - epel-5 [[BR]]

will be retired soon
> qemu - epel-5 [[BR]]

This is not orphaned since 2014-05-14
> revelation - epel-5 [[BR]]

This should not be there since 2014-12-17
> tigase-server - epel-all [[BR]]
> torque - epel-all [[BR]]
> xinha - epel-5 [[BR]]

will be retired today
> zope - epel-5

Cannot be retired currently because it is a dependency for fedpkg (via
 several other pkgs)