Many websites threatened by highly critical code-execution bug in Drupal (Ars Technica)