1 issue left for the package maintainer to handle:
CVE-2021-38084:
(needs triaging)
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.
debian/patches: 20 patches to forward upstream
low
Among the 23 debian patches
available in version 1.4.1-8 of the package,
we noticed the following issues:
20 patches
where the metadata indicates that the patch has not yet been forwarded
upstream. You should either forward the patch upstream or update the
metadata to document its real status.
This package will soon be part of the auto-perl transition. You might want to ensure that your package is ready for it.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/c/courier.png){kind=link}