I didn't check whether the "undetermined" state would work for a lower suite, thanks. I'll mark it as "postponed" or "ignored" instead -- but hopefully I'll get some info :)
- Bug#956305: varnish: CVE-2019-20637 Salvatore Bonaccorso
- Bug#956305: varnish: CVE-2019-20637 Sylvain Beucler
- Bug#956305: varnish: CVE-2019-20637 Stig Sandbeck Mathisen
- Bug#956305: varnish: CVE-2019-20637 Sylvain Beucler
- Bug#956305: varnish: CVE-2019-2063... Salvatore Bonaccorso
- Bug#956305: varnish: CVE-2019... Sylvain Beucler
- Bug#956305: varnish: CVE-... Salvatore Bonaccorso