A new Debian Linux update has been published: DSA 4772-1: httpcomponents-client security update
A httpcomponents-client security update has been released for Debian GNU/Linux 10 to address an issue where HttpComponents could misinterpret a malformed authority component in a request URI and pick the wrong target host for request execution.Read more @ Linux Compatible
