Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21894-1

Опубликовано: 20 сент. 2026
Источник: suse-cvrf

Описание

Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue:

  • CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message (bsc#1273163).

Список пакетов

openSUSE Leap 16.0
httpcomponents-client-4.5.14-160000.4.1
httpcomponents-client-cache-4.5.14-160000.4.1
httpcomponents-client-javadoc-4.5.14-160000.4.1

Ссылки

Описание

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message. Please note this defect does not affect HttpClient based on the async i/o model. This issue affects Apache HttpComponents Client: from 5.0-alpha1 through 5.6.2.

Затронутые продукты
openSUSE Leap 16.0:httpcomponents-client-4.5.14-160000.4.1
openSUSE Leap 16.0:httpcomponents-client-cache-4.5.14-160000.4.1
openSUSE Leap 16.0:httpcomponents-client-javadoc-4.5.14-160000.4.1
Ссылки