This is a security release, and will auto update if you have that turned on (which I hope you do).
I had hesitated to update some sites because of a bug with Genesis category widget. That fix is still not out.
And there will be no security patch for version 4.1.4, which is where I was holding.
So, update your sites, even if you run into the Genesis category widget issue.
Also remove the default Twenty Fifteen theme if you haven’t done so already. That is affected too. In fact, remove all unused themes while you’re at it.
You can find more info on the official announcement from WordPress