openssl: poodle patch

Patch from the discoverer of the POODLE CVE-2014-3566, Bodo Moeller,
submitted upstream to OpenSSL. A new release should be semi-imminent,
but this will mitigate the risk until that release. Anything with a
static link to OpenSSL needs to be revisioned also but I couldn’t think
of anything that doesn’t hook dynamically off the top of my head.