Seems that CryptoNote fixed flaw with merkle hash!
Fix is already on github, new Boolberry build is coming soon.
Well.... it seems that it was pretty hard day for many people here
Hmmmm they already got a fix for this?
Pretty weird if you ask me
It's also a load of shit. rfreeman_w (one of the Monero contributing developers) and I debugged it and sent exact same fix to Crypto Zoidberg for his review. That was well before (almost an hour) the "Cryptonote" scammers sent out the amazing fix they just happened to have. We also have a slightly different fix that cleans up the code.
If he is honest Zoidberg will confirm this.
EDIT: tacotime also deserves credit for pointing to the tree-hash function based on the transaction count in the poison block used for the attack. It was a great intuition.