Update imap-uw to the latest version (imap-2000).
Update pine4 to the latest version (pine-4.31).
Despite the fact that the new releases of imap-uw and pine are
intended to improve security, the security warnings on the pine
and imap-uw ports have been left intact until they have proven
themselves.
As Vladimir Ivanov explains:
unix-mx driver doesn't set file permissions properly for non-private
messages (e.g. public#). The problem caused by mx_append procedure,
where the driver doesn't call set_mbx_permissions for just created
message file.
Submitted by: Vladimir Ivanov <wawa@comptek.ru>