This Squid issue does not affect any Debian shipped packages. For policy reasons OpenSSL support is not built into the distributed squid or squid3 packages. Also FYI: the Jesse and later shipped OpenSSL library version contains a fix that protects all its dependenies from the underlying flaw. Cheers Amos Jeffries Squid Software Foundation