[Secure-testing-team] Bug#819783: squid3: CVE-2016-3947

[Salvatore Bonaccorso]

Source: squid3
Version: 3.5.15-1
Severity: important
Tags: security upstream patch

Hi,

the following vulnerability was published for squid3.

CVE-2016-3947[0]:
buffer overrun in Squid proxy 'pinger'

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-3947
[1] http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14015.patch
[2] http://www.squid-cache.org/Advisories/SQUID-2016_3.txt

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore