Jonas, Regarding how to resolve this bug, see #1030669 which has the same demand and was closed by a promise from Marco d'Itri. If you don't look him up or already know who he is, he says "I manage about 150 instances of Varnish, so let's just assume that I have the experience needed and some motivation." Moritz replies "Noted, thanks".
It's only when you research the individual that you find he has been a Debian Developer for 27 years, so perhaps Marco's casual attitude is an inside joke. If you follow the work done, you will see that the result is 3 commits over the last 18 months (varnish:debian/7.1.1-1.1) and two CVEs marked as "ignored, too minor" in the varnish package tracker. I accept that I'm not yet qualified to make this promise for asterisk. I'll level up my Debian participation and try again later. Thanks for your attention, Martin