serf: 1.3.6 -> 1.3.8

serf: 1.3.6 -> 1.3.8

Release changes:

Serf 1.3.8 [2014-10-20, from /tags/1.3.8, rxxxx]
  Fix issue #152: CRC calculation error for gzipped http reponses > 4GB.
  Fix issue #153: SSPI CredHandle not freed when APR pool is destroyed.
  Fix issue #154: Disable SSLv2 and SSLv3 as both or broken.

Serf 1.3.7 [2014-08-11, from /tags/1.3.7, r2411]
  Handle NUL bytes in fields of an X.509 certificate. (r2393, r2399)
  - CVE-2014-3504: (Closes: #757965)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>