Two CVEs newly rejected

DWF project has further retired CVE-2017-1000468 and CVE-2017-1000464
since further analysis did show there wasn't a security issue in those
cases.

Remove the todo after checking.