Changelog for libserf-1-1-1.3.9-63.2.x86_64.rpm :

* Tue Sep 18 2018 Tomáš Chvátal - Use %license for license install
* Wed Nov 08 2017 astiegerAATTsuse.com- Add libserf-python3.patch and libserf-python3-2.patch to fix building with python3
* Fri Apr 21 2017 astiegerAATTsuse.com- do not check with time-dependent failures bsc#1035395 bsc#1031549
* Thu Sep 01 2016 astiegerAATTsuse.com- Apache Serf 1.3.9:
* serf is now Apache Software Foundation project
* fix various build issues
* resolve a bucket (aka \"memory\") leak when a request bucket is destroyed before it is morphed into an aggregate bucket
* reset state variables when resetting connection
* fix types of passed, but unused batons
* fix some usages of the openssl BIO api
* improve handling of bad data in the response state line
* support more overrides via SCons arguments
* adapt to OpenSSL 1.1.x api- drop upstream patches: libserf-1.3.x-fix-comment-style.patch libserf-1.3.x-fix-deflate-buckets-test.patch
* Thu Oct 23 2014 andreas.stiegerAATTgmx.de- enable running test suite:
* add libserf-1.3.x-fix-comment-style.patch to fix compile error
* add libserf-1.3.x-fix-deflate-buckets-test.patch to fix crash
* Wed Oct 22 2014 andreas.stiegerAATTgmx.de- Serf 1.3.8 This release fixes a problem with handling very large gzip- encoded HTTP responses and disables SSLv2 and SSLv3.
* CRC calculation error for gzipped http reponses > 4GB.
* SSPI CredHandle not freed when APR pool is destroyed.
* Disable SSLv2 and SSLv3 as both or broken [boo#901968]- disable running tests due to memory leak in test fixture
* Mon Aug 11 2014 andreas.stiegerAATTgmx.de- Serf 1.3.7 Serf may not provide the full value for fields contained in X.509 certificates. Allowing for clients to potentially improperly accept certificates.
* Handle NUL bytes in fields of an X.509 certificate. [bnc#890510] [CVE-2014-3504]
* Mon Jun 09 2014 andreas.stiegerAATTgmx.de- Serf 1.3.6 [bnc#881902] This release fixes an instability introduced in serf 1.3.5
* Revert r2319 from serf 1.3.5: this change was making serf call handle_response multiple times in case of an error response, leading to unexpected behavior.
* Sun Apr 27 2014 andreas.stiegerAATTgmx.de- Serf 1.3.5 [bnc#875382] This release fixes a crash during SSL tunnel setup, fixes Negotiate/Kerberos authentication in some specific scenario\'s and brings some other small changes.
* Fix issue: no reverse lookup during Negotiate authentication for proxies.
* Fix a crash caused by incorrect reuse of the ssltunnel CONNECT request
* Cancel request if response parsing failed + authn callback set
* Update the expired certificates in the test suite.
* Sun Feb 09 2014 andreas.stiegerAATTgmx.de- Serf 1.3.4 This release fixes a race condition during OpenSSL initialisation and two ssl tunnel setup failures
* Endless loop during ssl tunnel setup with Negotiate authn
* Can\'t setup ssl tunnel which sends Connection close header
* race condition when initializing OpenSSL from multiple threads
* Incorrect pkg-config file when GSSAPI isn\'t configured