openssl: add fixes for CVE-2009-1387 and CVE-2009-2409 (thx, puchu)