Whitehouse.gov is still on Drupal 6 and not affected by this vulnerability.

The petition site is D7. But last I checked they have some pretty heavy hitters on that project. They probably knew about and patched the vulnerability before it was even publically released.