Thanks guys (and gals lol)! At this point how critical is it to upgrade? Our network is pretty active so I'm really not wanting to have to take it down until I absolutley have to. I saw Alex mention that this bug, whatever it is, is "almost impossible" to exploit; they'd need access to the admin panel & that's not an issue for us, I'm the only one with that access?
The upgrades contains fixes to bugs and some improvements. I have yet to fully upgrade myself because I have a highly modified Dolphin installation.
If you have modified core files, you either have to apply the upgrades, then apply your changes, or do as I do and apply your changes to the upgrade before doing the upgrade. I do the latter because I test heavily between each upgrade for any breakage of my site.
An upgrade will not take long to do, supposedly you can do it in place without taking the site off-line. I prefer to take my site off-line during an upgrade and I put up a notice to members when I do. It is not like your site will be down for an hour, it only takes f a few minutes to do an upgrade; or at least the way I do since the modifications I have made to core files are rolled into the upgrade before I apply the upgrade.