CVE-2021-37148

CVE-2021-37148

commit e2c9ac217f24dc3e91ff2c9f52b52093e8fb32d5
Author: Brian Neradt <brian.neradt@verizonmedia.com>
Date:   Wed Oct 27 11:30:32 2021 -0500

    8.1.x: Reject Transfer-Encoding in pre-HTTP/1.1 requests (#8457)

    Per spec, Transfer-Encoding is only supported in HTTP/1.1. For earlier
    versions, we must reject Transfer-Encoding rather than interpret it
    since downstream proxies may ignore the chunk header and rely upon the
    Content-Length, or interpret the body some other way.  These differences
    in interpretation may open up the door to compatibility issues. To
    protect against this, we reply with a 4xx if the client uses
    Transfer-Encoding with HTTP versions that do not support it.

Gbp-Pq: Name 0020-CVE-2021-37148.patch