Debian DLA-556-1 : squid3 security update
Medium Nessus Plugin ID 92524
SynopsisThe remote Debian host is missing a security update.
DescriptionA buffer overflow in the Squid 3's cache manager, identified by the CVE-2016-4051, was addressed by the DLA-478-1 and the Debian package version 3.1.20-2.2+deb7u6. However, the fix was incomplete and thus a new upload has been needed.
For Debian 7 'Wheezy', this problem has been fixed in version 3.1.20-2.2+deb7u6.
We recommend that you upgrade your squid3 packages.
NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpgrade the affected packages.