dovecot updated to 2.3.13, pigeonhole to 0.5.13
    CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
      allow logged in user to access other people's emails and filesystem
      information.
    Metric filter and global event filter variable syntax changed to a
      SQL-like format.
    auth: Added new aliases for %{variables}. Usage of the old ones is
      possible, but discouraged.
    auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
      mechanism and related password schemes.
    auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
    auth: Removed postfix postmap socket