CVE-2021-38370

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.