Comment 4 for bug 2041837

Thank you for reporting this @gberche.

Ubuntu Security is monitoring upstream's conversation, and we will apply their security patches as they become available. Then, those updates can be applied to OCIs as @athos-riberio describes.

> Would you have pointer to the task tracking the squid deb package updates?

From Security's side, the Ubuntu CVE Tracker [0][1] will be most up to date. This requires CVE-IDs, but those may be on their way.

[0] https://ubuntu.com/security/cves
[1] https://code.launchpad.net/ubuntu-cve-tracker