OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenSSL. A remote user may be able to conduct man-in-the-middle attacks and cause denial of service conditions.

1. The DTLS retransmission implementation does not properly maintain data structures for digest and encryption contexts. A remote user conducting a man-in-the-middle attacker may be able to trigger the use of a different context.
2. The ssl_get_algorithm2() function in 'ssl/s3_lib.c' uses an incorrect version number. A remote user can send specially crafted data (using TLS 1.2) to cause the target service to crash.