Mailing the story:
Debian alert: New heartbeat packages fix buffer overflows
Nathan Wallwork discovered a buffer overflow in heartbeat, a subsystem
for High-Availability Linux. A remote attacker could send a specially
crafted TCP packet that overflows a buffer, leaving heartbeat to
execute arbitrary code as root.