A new Debian Linux update has been published: DLA 2920-1: varnish security update
A varnish security update has been released for Debian GNU/Linux 9 LTS to address an issue that may lead to information disclosure and cache poisoning.Read more @ Linux Compatible