A new Debian Linux update has been published: ELA-296-1 httpcomponents-client security update
A httpcomponents-client security update has been released for Debian GNU/Linux 8 Extended LTS to address an issue where a malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.Read more @ Linux Compatible
