We already got bit by this and they circulated a pretty thorough write up. It's only affecting certain versions of the self-hosted version. They listed safe upg

We already got bit by this and they circulated a pretty thorough write up. It's only affecting certain versions of the self-hosted version. They listed safe upgrade paths and a a mitigation patch.