Hi,
I managed to push the CVE-2017-1000366 fix to rawhide through a resync. It's building now.
I have not yet touched the older Fedora branches (the upstream backports should be done, though), and I need a bit of sleep. I'll pick up the leftovers tomorrow morning and create Bodhi updates as needed.
Florian