RHSA-2004:133-12 presents 'squid' with a fix for CAN-2004-0189. A usual routine of rebuilding src.rpm referenced there, after a change in a release string, works just fine at least for 7.x releases. Michal