Debian Security Advisory DSA 721-1 – Michael Bhola discovered a bug in Squid, the popular WWW proxy cache. Squid does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39096/dsa-721-1.txt
Source: https://packetstormsecurity.com/files/39096/Debian-Linux-Security-Advisory-721-1.html