Story

Note that the patch issued yesterday fixes only part of the issue and some vulnerabilities remain, so patch now but be ready to patch again soon ;-)

Also, according to the bug report, the remaining problems also impact zsh. (edit: this has been refuted since then)

Some more detailed info on the general issue can be found at Red Hat's security blog