We take security very seriously and will make this update available to you as soon as it's released by the community. Last week we let you know that a fix was in the works: Engine Yard Upcoming Releases. Rest assured that we have all hands on deck -- ready to get the updated stack to you as soon as possible.
The upgrade process will be as usual: the Upgrade button will be made available in your environments; we'll also provide instructions for restarting your database. Note that, by default, our database instances never accept external connections and your application environment is locked down using security groups.
Tip: To stay up to date on this and other releases, please subscribe to this article and the Release Notes forum. (If you need help subscribing, see this article.)