On Fri, Jun 29, 2018 at 05:43:04AM +0000, Veetil, Vyshnav wrote:
Do we know the reason why this below listed CVEs will not be fixed For elfutils-libelf,elfutils-libs and elfutils pakages ? 1.CVE-2017-7607 2.CVE-2017-7608 3.CVE-2017-7609 4.CVE-2017-7610 5.CVE-2017-7611 6.CVE-2017-7612 7.CVE-2017-7613
Probably because they are all marked as Low impact. Past that you will need to ask Redhat as the project only rebuilds upstream sources.
John