A collection of links for the Heartbleed vulnerability

The Register: Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug

the core issue

The Register: Not just websites hit by OpenSSL's Heartbleed – PCs, phones and more under threat

vulnerabilities in client devices

The Register: Top ten biz software vendors reveal Heartbleed exposure

The Indie: Heartbleed bug: Am I at risk and do I really have to change my password?

seems to be well-balanced advice

The Telegraph: Heartbleed bug: which passwords should you change?

advice for specific web sites

Mashable: The Heartbleed Hit List: The Passwords You Need to Change Right Now