PR submitted: https://github.com/jbossas/jboss-eap/pull/1564
thanks Weinan, could you please file a component PR for 6.x as well, we need firstly proceed in 6.4. Once Bartosz merges this 6.3.x PR, he will update the status to MODIFIED.
*** Bug 1076434 has been marked as a duplicate of this bug. ***
Verified that httpclient was upgraded to 4.2.6.redhat-3 and httpcore was upgraded to 4.2.5.redhat-3