Yeah, "upgrade the affected appliances" jumped out at me too. We aren't using SAML so it wouldn't address anything specific to our config, assuming that's the only thing in it. My personal stance has always been to upgrade for any CVE disclosed, so I guess we'll be doing another round soon....yay.