CVE-2017-1000231 and CVE-2017-1000232.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

This version adds compatibility with openssl 1.1.0.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Fix #2663

Signed-off-by: Konstantin Shalygin <k0ste@cn.ru>
[refresh patch]
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>