BZ-1155314 - CVE-2012-6153 CVE-2014-3577 migrating from commons-httpclient to httpclient 4.x