I changed my password, but not solely due to the flaw - it was more a straw that broke the camel's back as I was using a password good enough for just email but not good enough for the master key to all my online (and banking) activity.
You know the drill - If it's worth saying, but not worth its own post (even in Discussion), then it goes here.