Axigen 10.7.2

SECURITY

• Close WebMail Proxy connections when a request body is left unread, preventing request smuggling (AXI-7572)
• Update dependencies to fix multiple vulnerabilities (AXI-7654)
• Update ts-loader dependencies to fix vulnerabilities (AXI-7659)
• Update dependencies to fix vulnerabilities (AXI-7664)
• Prevent a server crash caused by deeply nested SOAP requests (AXI-7683 • CVE-Pending • LEARN MORE)
• Prevent a server crash caused by deeply nested JSON requests (AXI-7684 • CVE-Pending • LEARN MORE)
• Restore the security headers on the contacts print page (AXI-7641)

SERVER

• Add per-account control over which folders trigger new mail push notifications (AXI-7517)
• Remove unsafe characters from push notification file names and log write errors safely (AXI-7565)
• Safely build the published signing key list from cluster nodes' keys (AXI-7573)
• Fix mobile app sync stopping on folders whose messages are missing from the sort index (AXI-7601)
• Decode ISO-2022-JP-MS natively, drop the bundled libiconv (AXI_ICONV_ENABLE) (AXI-7605)
• Reuse the existing retrieveToken when a push notification id is re-registered (AXI-7611)
• Track CRAM-MD5 / DIGEST-MD5 authentication usage in the statistics report (AXI-7625)
• Fix Webmail not working in cluster after update from 10.7.0 to 10.7.1 (AXI-7629)
• Fix missing iTips that cancel recurrent event exceptions after organizer changes recurrence rule (AXI-7636)
• Fix infinite loop in IMAP FETCH when parsing large envelopes (AXI-7649)
• Fix performance degradation when parsing certain headers (AXI-7650)
• Improve efficiency when parsing certain malformed headers (AXI-7652)
• Add new config flag to mark attributes as not desirable for exporting (AXI-7653)
• Fix server crash when an attachment filter replaces a MIME part without a Content-Type header (AXI-7658)
• Fix excessive CPU usage when detecting quoted parts for HTML content (AXI-7661)
• Fix extremely rare pcron deadlock during domain disable/delete (AXI-7662)
• Fix excessive CPU usage when detecting quoted parts for plain text content (AXI-7665)

WEBADMIN

• Fix error when resetting account quota to inherited (AXI-6938)
• Use an ampersand consistently in navigation tab and section labels (AXI-7632)
• Reuse a single labeled radio set control in the message rule and SMTP filter wizards (AXI-7633)
• Fix emails in a shared public folder reverting to "unread" for all users (AXI-7424)
• Widen the # column to display up to 4-digit group numbers in the Manage Groups list (AXI-7499)
• Expose the mobile apps push notification scope under WebMail & Mobile Apps (AXI-7518)
• Fix missing content from support incidents opened from WebAdmin (AXI-7631)

WEBMAIL

• Honor color-scheme meta tag and prefers-color-scheme media query in HTML emails (AXI-7234)
• Fix raw dictionary keys shown as password field labels (AXI-7627)
• Preserve emoji colors in dark mode when reading and composing messages (AXI-7628)

OTHER

• Axigen Migrator 1.6.3
  • Apply the config.toml settings in AutoMigration and fix Zimbra authentication with special characters in credentials (AT-122)
  • Preserve /var/opt/axigen/aximigrator/config.toml on Axigen upgrade (RPM, DEB, MSI) (AT-131)
• Axigen TNEF Decoder 1.4.14
  • Update Go to 1.27 and dependencies
• Axigen Mobile WebMail 1.7.0
  • Prevent composer drafts from accumulating blank lines and duplicate signature placeholders (AM-817)
  • Fix signature not auto-applying when replying to or forwarding a signed mail (AM-820)
  • Remove orphaned signature inline-image upload code (AM-821)
  • Fix TypeScript errors in specific scenarios (AM-822)
  • Disable long-press interactions on avatars in lists (AM-823)
  • Show large messages in full and load very large ones on demand (AM-824)
  • Decouple the mail body placeholder from mailView redux (AM-825)
  • Match inline images independently of a misreported isInline (AM-826)
  • Patch resolved inline images directly instead of re-rendering the whole mail body (AM-827)
  • Prevent toast button handlers from dismissing an unrelated newer toast (AM-831)
  • Align the remaining uses of the old contrast color with the WCAG palette (AM-841)
  • Update dependencies and address npm audit vulnerabilities (AM-818, AM-837, AM-842, AM-845)