diff --git a/squid-3.5.22.tar.xz b/squid-3.5.22.tar.xz
deleted file mode 100644
index f86ff17..0000000
--- a/squid-3.5.22.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1ce95b469257abeb2ed8a1c0417812301c1ef5a4cc40ca504167daa470ad9358
-size 2324164
diff --git a/squid-3.5.22.tar.xz.asc b/squid-3.5.22.tar.xz.asc
deleted file mode 100644
index 28e8770..0000000
--- a/squid-3.5.22.tar.xz.asc
+++ /dev/null
@@ -1,19 +0,0 @@
-File: squid-3.5.22.tar.xz
-Date: Sun Oct  9 23:43:33 UTC 2016
-Size: 2324164
-MD5 : afb82d2748c06c95815c171463b4aa14
-SHA1: 73e9199dd9d2a7f107f78d03454830713a4a571d
-Key : 0xFF5CF463 <squid3@treenet.co.nz>
-      
-      keyring = http://www.squid-cache.org/pgp.asc
-      keyserver = subkeys.pgp.net
------BEGIN PGP SIGNATURE-----
-
-iQEcBAABCAAGBQJX+tbSAAoJELJo5wb/XPRjl2gH/ReWuyxU88issJB6RDkqpg1z
-ULCFIGXOZieUB1Ec+kh6gkothXfFSmec4U/3nx42N2e1cFlQby9lRY27e7T47na7
-rA8ZiXc8gXNrE06GCtFXIR9AvRQrySAJMES6wJT4LigkfbS3wZt3PvUw+RUgGCcz
-RC14yLwFgzaAR7d9RVgZWBIOXlz4NUvdlb/ri+kiHc2mfT09ikm9NX+t5wJ64MfI
-S/U2tFJLDeqG0B4Sx/lnl35h7f2mk+c9DPfmTDkZSE1dJScE34GtEpehJQwZcxA9
-EHgPwIP4BFIReywnCwhDMY17JDkC58gXyOBNjSd6v0PzyvXbSQLAYYJu1MKzKi8=
-=JCC/
------END PGP SIGNATURE-----
diff --git a/squid-3.5.23.tar.xz b/squid-3.5.23.tar.xz
new file mode 100644
index 0000000..a32a0df
--- /dev/null
+++ b/squid-3.5.23.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fa4c0c99f41e92fe1330bed3968d176c6f47ef2e3aea2f83977d5501afa40bdb
+size 2325884
diff --git a/squid-3.5.23.tar.xz.asc b/squid-3.5.23.tar.xz.asc
new file mode 100644
index 0000000..f37c4a0
--- /dev/null
+++ b/squid-3.5.23.tar.xz.asc
@@ -0,0 +1,20 @@
+File: squid-3.5.23.tar.xz
+Date: Fri Dec 16 17:48:18 UTC 2016
+Size: 2325884
+MD5 : 9b68f689e3d9578932b9c6a4041037c2
+SHA1: 33e43869d5eeb0fdfd1d625e6d6edee0617b2b22
+Key : 0xFF5CF463 <squid3@treenet.co.nz>
+            EA31 CC5E 9488 E516 8D2D  CC5E B268 E706 FF5C F463
+      keyring = http://www.squid-cache.org/pgp.asc
+      keyserver = subkeys.pgp.net
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEE6jHMXpSI5RaNLcxesmjnBv9c9GMFAlhUKpEACgkQsmjnBv9c
+9GPHkAf+I1MvNwsVP8I8v3Acr9vifJHoJDySEPa1ZaFsUzPwpJQbu9PmYBB+wRd8
+9r1F/931QjJCXmf2dqFFhBEAzHezcd7cPnSIP/yPvqrR1ue/29EZge3AhCI6xuQ6
+Zl4AwCVTEzO4clnX0A7adllAIIuTRH7a5kBSa4FQ1Df2ucDx70inriRzjY40b5/S
+8SbYp1aKPCxK5ZUx4sm8HsJURZoiGmOAHZLFrkp1Q+kX6km56bEnTwh/PovXpCDn
+N6UTfriJABUODgbVwOjyPO6mkESVcuMhmf98dH9zUWKDlj76fwOMO9ZDtKERDlm4
+18xHNE797AKSq4eWkl1B9FjHlIUQ/A==
+=sq9p
+-----END PGP SIGNATURE-----
diff --git a/squid.changes b/squid.changes
index fed4aba..27ccece 100644
--- a/squid.changes
+++ b/squid.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Fri Jan 27 15:15:15 UTC 2017 - adam.majer@suse.de
+
+- Update Squid to 3.5.23
+  * Do not share private responses with collapsed client(s).
+    (CVE-2016-10003)
+  * Fixes incorrect processing of responses to If-None-Modified
+    HTTP conditional requests. (CVE-2016-10002)
+  * partially fix hostHeaderVerify failures MISS when they should
+    be HIT
+  * HTTP/1.1: Add registered codes entry for new 103 (Early Hints)
+    status code
+  * Hang on DNS query with dead-end CNAME
+  * partial: Fix segfault via Ftp::Client::readControlReply
+  * Fix ssl::server_name ACL - was badly broken since inception.
+  * HTTP/1.1: make Vary:* objects cacheable
+  * fix Strange IPv6 shown in access.log
+
 -------------------------------------------------------------------
 Wed Oct 12 14:51:59 UTC 2016 - adam.majer@suse.de
 
diff --git a/squid.spec b/squid.spec
index 5d4e775..7f932fb 100644
--- a/squid.spec
+++ b/squid.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package squid
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 %define         squidconfdir %{_sysconfdir}/squid
 
 Name:           squid
-Version:        3.5.22
+Version:        3.5.23
 Release:        0
 Summary:        A fully featured HTTP/1.0 proxy
 License:        GPL-2.0+