Hi,
I managed to push the CVE-2017-1000366 fix to rawhide through a resync.
It's building now.
I have not yet touched the older Fedora branches (the upstream backports
should be done, though), and I need a bit of sleep. I'll pick up the
leftovers tomorrow morning and create Bodhi updates as needed.
Florian