Axigen 10.5.65

SECURITY

• Fix WebAdmin memory leak in metrics endpoint (AXI-7253)
• Fix unbounded MIME parsing on Content-Language headers (AXI-7285)
• Improve conversation index performance when detecting quoted parts (AXI-7287)
• Fix WebMail session IDs generated from libc rand + predictable counters (AXI-7298)
• Fix ActiveSync pre-auth heap overflow scenario (AXI-7306)
• Fix ActiveSync / WBXML getValue() string-table index OOB / NULL read (AXI-7308)
• Fix ActiveSync stack overflow scenario when synchronizing notes (AXI-7309)
• Fix ActiveSync crash when fed malformed opaque data (AXI-7311)
• Fix CardDAV stack overflow scenario (AXI-7314)
• Fix CalDAV heap OOB read and NUL write in href parsing (AXI-7315)
• Fix CalDAV PUT stack overflow scenario (AXI-7316)
• Fix CalDAV REPORT stack overflow scenario (AXI-7317)
• Fix CalDAV freebusy/acl-principal-prop-set REPORT null pointer dereference (AXI-7319)
• Fix CalDAV null pointer dereference in share request (AXI-7321)
• Fix CalDAV unbounded recursion when processing heavily nested XML requests (AXI-7322)
• Fix CardDAV addressbook-multiget REPORT crash scenario (AXI-7324)
• Fix ActiveSync invalid read scenario (AXI-7334)
• Fix pre-auth IMAP ID out of bounds read (AXI-7341)
• Improve security by hardening the compiled axigen binary (AXI-7347)
• Update form-data axios dependency to fix injection vulnerability (GHSA-hmw2-7cc7-3qxx) (AXI-7355)

SERVER

• Fix out of office message not sent to Gmail / Outlook.com when account name contains a comma (AXI-7337)
• Fix temporary storage containers left on disk after crash (AXI-7338)

WEBMAIL

• Fix Standard and Mobile WebMail no longer accessible (AXI-6995)

OTHER

• Update cacert_pem.default distributed with the packages (AXI-7353)