After all the buzz about CVE-2017-9445 it seems unclear to me which versions are really affected and need patching and which not?
Their own CVE issue states that Ubuntu 14.04 to the latest upstream release are affected by this, but only 16.10 and 17.04 have been receiving patches.
On the other hand in their disclosure they state that only Ubuntu 16.10 and 17.04 are affected.
Is Ubuntu (14.04.X and) 16.04.X now affected or not?
Also if so, after applying the update, is a full system reboot needed to apply the patch to systemd or can this be done on a live system?