tags 305605 +woody +security thanks As of
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0718 http://www.squid-cache.org/bugs/show_bug.cgi?id=1224 Squid 2.5.STABLE9 is not vulnerable (bug fixed in 2.5.STABLE8), so is the package in sarge/sid. I'm investigating the woody package. Regards, Luigi Gangitano