[ Thanks to LinuxSecurity Contributors for
this link. ]
“Vendors have not issued updates yet for a vulnerability just
reported by the Squid Project. ‘Under some conditions Squid may
forward the proxy authentication credentails. This can happen if
you normally require your users to log in to use the proxy, but
allow some sites to be reached without needing to log in.’