Three vulnerabilities have been patched in OpenSSL, including one that allows an attacker to recover the private key.