Hi, there is a little mistake in reporting. I build a own package and forgot to replace it with the original one before opening the report:
was: Package: squid Version: 3.5.23-5+deb9u2.1 Severity: important File: /usr/sbin/squid correct: Package: squid Version: 3.5.23-5+deb9u2 Severity: important File: /usr/sbin/squid regards, Andreas