Debian-LTS alert DLA-556-1 (squid3)

From:
    	     
 
"Santiago R.R." <santiagorr@riseup.net> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 556-1] squid3 security update 
Date:
    	     
 
Sat, 23 Jul 2016 09:02:56 +0200
Message-ID:
    	     
 
<20160723070255.GA23258@riseup.net>
Package        : squid3
Version        : 3.1.20-2.2+deb7u6
CVE ID         : CVE-2016-4051


A buffer overflow in the Squid 3's cache manager, identified by the
CVE-2016-4051, was addressed by the DLA-478-1 and the Debian package
version 3.1.20-2.2+deb7u6. However, the fix was incomplete and thus a
new upload has been needed.

For Debian 7 "Wheezy", this problem has been fixed in version
3.1.20-2.2+deb7u6.

We recommend that you upgrade your squid3 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS