openSUSE 16: httpcomponents-client / httpcomponents-client-cache / etc (openSUSE-SU-2026:21894-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21894-1 advisory. This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager...

OPENSUSE-SU-2026:21894-1 Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163...

Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163. Patch Instructions: To install this SUSE update use...

httpcomponents-client-4.5.14-2.1 on GA media (moderate)

httpcomponents-client-4.5.14-2.1 on GA media Announcement ID: openSUSE-SU-2026:11647-1 Rating: moderate Cross-References: CVE-2026-64607 CVSS scores: CVE-2026-64607 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-64607 SUSE : 6.9...

CLEANSTART-2026-US56197 Security fixes in elasticsearch 9.5.2-r2

Package elasticsearch version 9.5.2-r2 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...

CLEANSTART-2026-AY54291 Security fixes in spring-boot 4.1.0-r0

Package spring-boot version 4.1.0-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

CLEANSTART-2026-NW99656 Security fixes in elasticsearch 9.5.2-r1

Package elasticsearch version 9.5.2-r1 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...

CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0

Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607]

Summary Electronic Service Agent for IBM i uses HttpClient for HTTP message handling. HttpClient is vulnerable to not releasing underlying resources when encountering an invalid or unsupported 'Content-Encoding' header value CVE-2026-64607 as described in the vulnerability details section...

CVE-2026-64607

creationtimestamp| type| source ---|---|--- 2026-08-13 22:22:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3peh72najhpel...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16912 more potentially affected by CVE-2026-64607 via org.apache.httpcomponents.client5:httpclient5 (>=5.0-alpha1, <=5.6.2)

org.apache.httpcomponents.client5:httpclient5 MAVEN version =5.0-alpha1, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...