https://www.yubico.com/support/security-advisories/ysa-2017-...
Seems the recommendation is to ensure you generate GPG private keys off the YubiKey (if you have an affected device).