Do I have to update my system or worry about the vulnerabilities?
Nothing in the OS uses PHP and the laughably weak certs were revoked upstream so there is nothing to do. If you have installed containers that use PHP that's your responsibility to check and update if needed.