Facebook has revealed that a software bug exposed the photos of up to 6.8 million users