Computer security experts are advising administrators to patch a severe flaw in a software library used by millions of websites to encrypt sensitive communications.