These two fields allow to specify a different default assignee for ticket opened against this package in bugzilla. Note: The EPEL field is always displayed for packages in the 'rpms' namespace regardless of whether it is used in bugzilla or not.
bfd6386
list CVE-2016-4953 in changelog as fixed bug Fix for CVE-2015-7979 fixed also CVE-2016-4953.