From e87828a817d94ee120df9a40e7fe90c7058a8e58 Mon Sep 17 00:00:00 2001
From: Chaitanya Bhorade <bhoradc@amazon.com>
Date: Wed, 12 Aug 2026 09:06:42 -0700
Subject: [PATCH] Upgrade httpclient5 to 5.6.4 to address CVE-2026-71290

---
 .../next-release/feature-ApacheHTTPClient5-9cd8eeb.json     | 6 ++++++
 pom.xml                                                     | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 .changes/next-release/feature-ApacheHTTPClient5-9cd8eeb.json

diff --git a/.changes/next-release/feature-ApacheHTTPClient5-9cd8eeb.json b/.changes/next-release/feature-ApacheHTTPClient5-9cd8eeb.json
new file mode 100644
index 000000000000..d9a668d4e3aa
--- /dev/null
+++ b/.changes/next-release/feature-ApacheHTTPClient5-9cd8eeb.json
@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Apache HTTP Client 5",
+    "contributor": "",
+    "description": "Upgrade httpcomponents.client5 to 5.6.4 to address CVE-2026-71290"
+}
diff --git a/pom.xml b/pom.xml
index cbfec5b8c4e2..c540b6bc86a5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -189,7 +189,7 @@
         <jre.version>1.8</jre.version>
         <httpcomponents.httpclient.version>4.5.13</httpcomponents.httpclient.version>
         <httpcomponents.httpcore.version>4.4.16</httpcomponents.httpcore.version>
-        <httpcomponents.client5.version>5.6.3</httpcomponents.client5.version>
+        <httpcomponents.client5.version>5.6.4</httpcomponents.client5.version>
         <httpcomponents.core5.version>5.4.3</httpcomponents.core5.version>
         <!-- Reactive Streams version -->
         <reactive-streams.version>1.0.4</reactive-streams.version>