This has been reported upstream.We do not believe Squid is as vulnerable as the authors claim. At the very least they have a number of statements regarding Squid incorrect.
We do recognize there is a potential issue here and are working on resolving it along with other minor attacks notified recently.
Amos Jeffries Squid-3 Maintainer -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
