Add *initial* information for CVE-2018-1172

Use special tracking for squid, since it was removed from archive, later
for the (for now only) experimental upload renamed from squid3 to squid
back.