There's now a BookStack blog for this, which we'll aim to keep updated with BookStack specific guidance as things develop:

https://www.bookstackapp.com/blog/php-security-release-critical/