Originally Posted by padeen
Looking forward, how can I make sure I get the future security patches for squid3? Or at least get notified of them.
You should be subscribed to firstname.lastname@example.org
Also, if you have your squid3 package on hold apt-get should explicitly tell you when you do an upgrade and there is an new version of squid3 that is "kept back".
This would be your prompt to get the new/patched source package for squid3 and rebuild and install your binary package.
However, depending on what the additional configure flag is, it may be worth filing a bug to get it included in the default Debian build.
What configure option is it that you need?