The package tnef [1][2] has unfixed CVEs [3][4]. A fix has been commited and an update has been released upstream. The fedora version has not seen this update yet. Can someone please step in? [1] https://src.fedoraproject.org/rpms/tnef [2] https://apps.fedoraproject.org/packages/tnef [3] https://bugzilla.redhat.com/show_bug.cgi?id=1451258 [4] https://apps.fedoraproject.org/packages/tnef _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx