Hearbleed vulnerability

This software uses openssl-1.0.1f, which is vulnerable to the Heartbleed bug.

The patch file applies the fix for it.  I found it easier than bumping the openssl version number (it did not compile).