I guess we're not generating enough security bugs to trigger urgent updates. :-)Perhaps Debian needs a Postfix maintainer with more cycles to proactively keep it up to date?
Or...Dovecot maintains their own repo (https://repo.dovecot.org/) for us common folk to add to our package managers allowing us to have recent updates without relying on distros to get around to it.
