Box has patched the Heartbleed security hole on its servers and has advised its customers to change their passwords.