The package tnef [1][2] has unfixed CVEs [3][4]. A fix has been commited and an update has
been released upstream. The fedora version has not seen this update yet. Can someone
please step in?
[1]
https://src.fedoraproject.org/rpms/tnef
[2]
https://apps.fedoraproject.org/packages/tnef
[3]
https://bugzilla.redhat.com/show_bug.cgi?id=1451258
[4]
https://apps.fedoraproject.org/packages/tnef