Bug announced by security researchers from Codenomicon and Google Security this week is in software used to secure about two-thirds of all websites