I was not sure, maybe this should be news, but it is not specific to OpenBsd, so any way,
For anyone using Drupal on their server or as a website:
Please read this and update your sites as soon as possible.
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002
https://www.drupal.org/sa-core-2018-002