I wasn't sure where this might fit in, but this looked like the best place - feel free to move it. I do know some affiliates have used Drupal for their sites.

Apparently a security problem was found and a fix is available, news from Drupal as a public service announcement. In the article, it says that just updating will not remove the backdoors that may have been introduced.