Ask HN: Does Heartbleed affect CAs?

If my understanding is correct the Heartbleed vulnerability affects any server running OpenSSL. Does this mean that root CAs need to update their root CA Certs? Should I be doing that manually somehow?