[ANNOUNCEMENT] HttpComponents Client 5.0.3 GA Released

2020-10-08 Thread Oleg Kalnichevski
The Apache HttpComponents project is pleased to announce 5.0.3 GA release of HttpComponents HttpClient. This is a maintenance release that fixes incorrect handling of malformed authority component in request URIs. Download - Release notes - <

[ANNOUNCEMENT] HttpComponents Client 4.5.13 GA Released

2020-10-08 Thread Oleg Kalnichevski
The Apache HttpComponents project is pleased to announce 4.5.13 GA release of HttpComponents HttpClient. This is a maintenance release that fixes incorrect handling of malformed authority component in request URIs. Download - Release notes - <

[CVE-2020-13956] Apache HttpClient incorrect handling of malformed URI authority component

2020-10-08 Thread Oleg Kalnichevski
CVE-2020-13956: Apache HttpClient incorrect handling of malformed authority component in request URIs Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache HttpClient 4.5.12 and prior Apache HttpClient 5.0.2 and prior Description: Apache HttpClient versions prior