[OE-core] [PATCH 1/1] serf: 1.3.6 - 1.3.8

2014-11-17 Thread wenzong.fan 
From: Wenzong Fan wenzong@windriver.com

Release changes:

Serf 1.3.8 [2014-10-20, from /tags/1.3.8, r]
  Fix issue #152: CRC calculation error for gzipped http reponses  4GB.
  Fix issue #153: SSPI CredHandle not freed when APR pool is destroyed.
  Fix issue #154: Disable SSLv2 and SSLv3 as both or broken.

Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411]
  Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399)

Signed-off-by: Wenzong Fan wenzong@windriver.com
---
 .../serf/{serf_1.3.6.bb = serf_1.3.8.bb}  |6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 rename meta/recipes-support/serf/{serf_1.3.6.bb = serf_1.3.8.bb} (74%)

diff --git a/meta/recipes-support/serf/serf_1.3.6.bb 
b/meta/recipes-support/serf/serf_1.3.8.bb
similarity index 74%
rename from meta/recipes-support/serf/serf_1.3.6.bb
rename to meta/recipes-support/serf/serf_1.3.8.bb
index 08b04d3..10db122 100644
--- a/meta/recipes-support/serf/serf_1.3.6.bb
+++ b/meta/recipes-support/serf/serf_1.3.8.bb
@@ -1,8 +1,8 @@
 
-SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-1.3.6.tar.bz2 \
+SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-${PV}.tar.bz2 \
file://norpath.patch
-SRC_URI[md5sum] = 7fe38fa6eab078e0beabf291d8e4995d
-SRC_URI[sha256sum] = 
ca637beb0399797d4fc7ffa85e801733cd9c876997fac4a4fd12e9afe86563f2
+SRC_URI[md5sum] = 2e4efe57ff28cb3202a112e90f0c2889
+SRC_URI[sha256sum] = 
e0500be065dbbce490449837bb2ab624e46d64fc0b090474d9acaa87c82b2590
 
 LICENSE = Apache-2.0
 LIC_FILES_CHKSUM = file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327
-- 
1.7.9.5

-- 
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH 1/1] serf: 1.3.6 - 1.3.8

2014-11-17 Thread akuster 
Since Dizzy would need the security fix in serf 1.3.7, would  I backport 
1.3.8 to Dizzy from master or do we need a separate 1.3.7 update for Dizzy?


- Armin


On 11/17/2014 12:38 AM, wenzong@windriver.com wrote:

From: Wenzong Fan wenzong@windriver.com

Release changes:

Serf 1.3.8 [2014-10-20, from /tags/1.3.8, r]
   Fix issue #152: CRC calculation error for gzipped http reponses  4GB.
   Fix issue #153: SSPI CredHandle not freed when APR pool is destroyed.
   Fix issue #154: Disable SSLv2 and SSLv3 as both or broken.

Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411]
   Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399)

Signed-off-by: Wenzong Fan wenzong@windriver.com
---
  .../serf/{serf_1.3.6.bb = serf_1.3.8.bb}  |6 +++---
  1 file changed, 3 insertions(+), 3 deletions(-)
  rename meta/recipes-support/serf/{serf_1.3.6.bb = serf_1.3.8.bb} (74%)

diff --git a/meta/recipes-support/serf/serf_1.3.6.bb 
b/meta/recipes-support/serf/serf_1.3.8.bb
similarity index 74%
rename from meta/recipes-support/serf/serf_1.3.6.bb
rename to meta/recipes-support/serf/serf_1.3.8.bb
index 08b04d3..10db122 100644
--- a/meta/recipes-support/serf/serf_1.3.6.bb
+++ b/meta/recipes-support/serf/serf_1.3.8.bb
@@ -1,8 +1,8 @@

-SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-1.3.6.tar.bz2 \
+SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-${PV}.tar.bz2 \
 file://norpath.patch
-SRC_URI[md5sum] = 7fe38fa6eab078e0beabf291d8e4995d
-SRC_URI[sha256sum] = 
ca637beb0399797d4fc7ffa85e801733cd9c876997fac4a4fd12e9afe86563f2
+SRC_URI[md5sum] = 2e4efe57ff28cb3202a112e90f0c2889
+SRC_URI[sha256sum] = 
e0500be065dbbce490449837bb2ab624e46d64fc0b090474d9acaa87c82b2590

  LICENSE = Apache-2.0
  LIC_FILES_CHKSUM = file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327


--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Re: [OE-core] [PATCH 1/1] serf: 1.3.6 - 1.3.8

2014-11-17 Thread Mark Hatle 

On 11/17/14, 9:43 AM, akuster wrote:

Since Dizzy would need the security fix in serf 1.3.7, would  I backport
1.3.8 to Dizzy from master or do we need a separate 1.3.7 update for Dizzy?


Unless there is no way to backport, usual process is a separate 1.3.7 update for 
Dizzy.


--Mark


- Armin


On 11/17/2014 12:38 AM, wenzong@windriver.com wrote:

From: Wenzong Fan wenzong@windriver.com

Release changes:

Serf 1.3.8 [2014-10-20, from /tags/1.3.8, r]
Fix issue #152: CRC calculation error for gzipped http reponses  4GB.
Fix issue #153: SSPI CredHandle not freed when APR pool is destroyed.
Fix issue #154: Disable SSLv2 and SSLv3 as both or broken.

Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411]
Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399)

Signed-off-by: Wenzong Fan wenzong@windriver.com
---
   .../serf/{serf_1.3.6.bb = serf_1.3.8.bb}  |6 +++---
   1 file changed, 3 insertions(+), 3 deletions(-)
   rename meta/recipes-support/serf/{serf_1.3.6.bb = serf_1.3.8.bb} (74%)

diff --git a/meta/recipes-support/serf/serf_1.3.6.bb 
b/meta/recipes-support/serf/serf_1.3.8.bb
similarity index 74%
rename from meta/recipes-support/serf/serf_1.3.6.bb
rename to meta/recipes-support/serf/serf_1.3.8.bb
index 08b04d3..10db122 100644
--- a/meta/recipes-support/serf/serf_1.3.6.bb
+++ b/meta/recipes-support/serf/serf_1.3.8.bb
@@ -1,8 +1,8 @@

-SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-1.3.6.tar.bz2 \
+SRC_URI = http://serf.googlecode.com/svn/src_releases/serf-${PV}.tar.bz2 \
  file://norpath.patch
-SRC_URI[md5sum] = 7fe38fa6eab078e0beabf291d8e4995d
-SRC_URI[sha256sum] = 
ca637beb0399797d4fc7ffa85e801733cd9c876997fac4a4fd12e9afe86563f2
+SRC_URI[md5sum] = 2e4efe57ff28cb3202a112e90f0c2889
+SRC_URI[sha256sum] = 
e0500be065dbbce490449837bb2ab624e46d64fc0b090474d9acaa87c82b2590

   LICENSE = Apache-2.0
   LIC_FILES_CHKSUM = file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327



--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-core