These are all security issues fixed in the apache-commons-httpclient-3.1-8.5 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "apache-commons-httpclient-manual": "3.1-8.5", "apache-commons-httpclient": "3.1-8.5", "apache-commons-httpclient-javadoc": "3.1-8.5", "apache-commons-httpclient-demo": "3.1-8.5" } ] }