diff --git a/squid-3.5.23.tar.xz b/squid-3.5.23.tar.xz
deleted file mode 100644
index a32a0df..0000000
--- a/squid-3.5.23.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fa4c0c99f41e92fe1330bed3968d176c6f47ef2e3aea2f83977d5501afa40bdb
-size 2325884
diff --git a/squid-3.5.23.tar.xz.asc b/squid-3.5.23.tar.xz.asc
deleted file mode 100644
index f37c4a0..0000000
--- a/squid-3.5.23.tar.xz.asc
+++ /dev/null
@@ -1,20 +0,0 @@
-File: squid-3.5.23.tar.xz
-Date: Fri Dec 16 17:48:18 UTC 2016
-Size: 2325884
-MD5 : 9b68f689e3d9578932b9c6a4041037c2
-SHA1: 33e43869d5eeb0fdfd1d625e6d6edee0617b2b22
-Key : 0xFF5CF463 <squid3@treenet.co.nz>
-            EA31 CC5E 9488 E516 8D2D  CC5E B268 E706 FF5C F463
-      keyring = http://www.squid-cache.org/pgp.asc
-      keyserver = subkeys.pgp.net
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEE6jHMXpSI5RaNLcxesmjnBv9c9GMFAlhUKpEACgkQsmjnBv9c
-9GPHkAf+I1MvNwsVP8I8v3Acr9vifJHoJDySEPa1ZaFsUzPwpJQbu9PmYBB+wRd8
-9r1F/931QjJCXmf2dqFFhBEAzHezcd7cPnSIP/yPvqrR1ue/29EZge3AhCI6xuQ6
-Zl4AwCVTEzO4clnX0A7adllAIIuTRH7a5kBSa4FQ1Df2ucDx70inriRzjY40b5/S
-8SbYp1aKPCxK5ZUx4sm8HsJURZoiGmOAHZLFrkp1Q+kX6km56bEnTwh/PovXpCDn
-N6UTfriJABUODgbVwOjyPO6mkESVcuMhmf98dH9zUWKDlj76fwOMO9ZDtKERDlm4
-18xHNE797AKSq4eWkl1B9FjHlIUQ/A==
-=sq9p
------END PGP SIGNATURE-----
diff --git a/squid-3.5.24.tar.xz b/squid-3.5.24.tar.xz
new file mode 100644
index 0000000..e484220
--- /dev/null
+++ b/squid-3.5.24.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4fe29f582eef357faa541a53835b6885e24e6f28b80a3abcdf3b57f5393bbdb2
+size 2326424
diff --git a/squid-3.5.24.tar.xz.asc b/squid-3.5.24.tar.xz.asc
new file mode 100644
index 0000000..0c0fc10
--- /dev/null
+++ b/squid-3.5.24.tar.xz.asc
@@ -0,0 +1,20 @@
+File: squid-3.5.24.tar.xz
+Date: Sat Jan 28 08:22:04 UTC 2017
+Size: 2326424
+MD5 : 3fae511e16b6379b61c011914673973d
+SHA1: f203637783301a4b86e554b6dd226de721762ae5
+Key : 0xFF5CF463 <squid3@treenet.co.nz>
+            EA31 CC5E 9488 E516 8D2D  CC5E B268 E706 FF5C F463
+      keyring = http://www.squid-cache.org/pgp.asc
+      keyserver = subkeys.pgp.net
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEE6jHMXpSI5RaNLcxesmjnBv9c9GMFAliMVWgACgkQsmjnBv9c
+9GP0QwgAwRR2s/Y3gZu+iI1teUmPx31vuJZsQqtmEaF9aG+/Yv0slTzET2M43W6w
+EPWPhV1MvEGExQNFE1UN+tpCtaS3JnGYihOuaUGIRyrtqxs5ksvzGTCXp2fb8J+b
+hEbbgMvEAf8ijQ7ExaBsE7fUazdzAIZtzRXsuGP/fQy91CQ6C5ZOnBKHHe81uIRz
+5eCHo2ro23Can2KEwQpLG4XsGxnII6SqVK3Vx83790q8jZP/qbTp1KcR6NxEyBNl
++0SNyzjvdqMi2uXPBOzA0H2RXCdEOJdMdQGSQrgHaiPvg2jf1737zqYtMEYaeYgf
++Z7IgU0kdiq/jwGHgVPJLdRZasXi+g==
+=hZv8
+-----END PGP SIGNATURE-----
diff --git a/squid.changes b/squid.changes
index 27ccece..a3331d8 100644
--- a/squid.changes
+++ b/squid.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Mon Jan 30 09:33:08 UTC 2017 - adam.majer@suse.de
+
+- Update Squid to 3.5.24
+  * Mitigate DoS attacks that use client-initiated SSL/TLS
+    renegotiation. Rate limit TLS renegotiation.
+  * SSLv2 records force SslBump bumping despite a matching step2
+    peek rule.
+  * Update External ACL helpers error handling and caching
+  * Fix regression in 3.5.23 where `cache deny` rule was not
+    obeyed.
+
 -------------------------------------------------------------------
 Fri Jan 27 15:15:15 UTC 2017 - adam.majer@suse.de
 
diff --git a/squid.spec b/squid.spec
index 7f932fb..80c2e83 100644
--- a/squid.spec
+++ b/squid.spec
@@ -20,7 +20,7 @@
 %define         squidconfdir %{_sysconfdir}/squid
 
 Name:           squid
-Version:        3.5.23
+Version:        3.5.24
 Release:        0
 Summary:        A fully featured HTTP/1.0 proxy
 License:        GPL-2.0+