Do i need to update for the Security Alert: SQL Injection Risk
If I just d/l the 1.3.8a zencart?

thanks