These are all security issues fixed in the apache-commons-httpclient-3.1-13.4 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "apache-commons-httpclient-manual": "3.1-13.4", "apache-commons-httpclient": "3.1-13.4", "apache-commons-httpclient-javadoc": "3.1-13.4", "apache-commons-httpclient-demo": "3.1-13.4" } ] }