[squid 3.5.5] security Update Advisory SQUID-2016:2

[Paul Martin <paul.martin.b787@xxxxxxxxx>]

Hello,

I have squid 3.5.5, I see  Security Update Advisory SQUID-2016:2:

You suggest 2 solutions on http://www.squid-cache.org/Advisories/SQUID-2016_2.txt
--

1) add in squid.conf:
acl Vary rep_header Vary
store_miss deny Vary

--
2) or add in squid.conf :
cache deny all

--

What's the best solution for parent squid ? for child squid ?
Where should i put these lines in squid.conf ?

Thank you

Paul

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users