Current packaged version (1.9.2) is out of date, latest is 1.9.3 and this fixes all outstanding CVEs.
I've updated it to 1.9.3 in rawhide (F31), and I'll submit a security update to F30 as well. Itamar, I hope you don't mind me updating your package.
ytnef-1.9.3-1.fc30 has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2019-7d7083b8be
ytnef-1.9.3-1.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-7d7083b8be
ytnef-1.9.3-1.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report.