- CVE-2015-5739, "Content Length" treated as valid header - CVE-2015-5740, Double content-length headers does not return 400 error - CVE-2015-5741, Additional hardening, not sending Content-Length w/Transfer-Encoding, Closing connections from upstream git ok jsing@ (MAINTAINER), czarkoff@