We've posted a full update on the blog: https://blog.heroku.com/archives/2014/4/8/openssl_heartbleed...