package varnish: upgrade to 3.0.5 fix old cve