The Heartbleed vulnerability is real.
Yes, you must change ALL of your online passwords. Now. And, before you start whining, admit it, you don't even remember the last time you changed them, right?For more information on the Heartbleed vulnerability see: this, this and this.