Source: varnish
Version: 7.1.1-1.1
Severity: serious
Varnish should only be included in Bookworm with a reliable commitment
by the maintainers to backport/test security fixes across the typical
three year life cycle (two years of stable-security and one year of
oldstable-security).
Especially since testing currently has 7.1, which reaches it's end of
life on March 15 2023 and does not contain the LTS release.
(It's not unlikely that most people who operate a CDN based on Varnish
only use custom/patched/recent packages backported from stable
anyway, which is perfectly fine, but then let's make that explicit
by keeping it out of testing).
Cheers,
Moritz
