Fix invalid memory access crashes in HTTP fake body.

Application firewall not blocking BitTorrent P2P traffic.

Fix session double release issues in session iterations.

Fix a crash in packet cache caused by sending invalid data buffers.

Fix crash on derived packet processing.

Use existing private keys in FortiGate for certificate resigning.

Web filtering produces rating error logs, despite that FortiGuard connectivity appears to be working.

Security policy action is deny in some traffic logs.

ipsengine segfault in NGFW policy mode.

Clean up the rule reference interface.

Fix double initialization in content decoders.

Web filter URL filter check is skipped in flow mode certificate inspection if SNI is not present in TLS client hello.

Fix NULL pointer dereference crash.

PCAP from IPS not dumped as configured in packet-log-history and packet-log-post-attack settings.

Traffic failing in NGFW policy-based mode when TCP source port range includes a zero value.

DLP triggered by HTTP traffic when only FTP protocol is enabled.

After clearing the server cache, get Connection reset by peer message when visiting a URL in a FortiGuard category set to override.

NGFW policy mode allows all services when ICMP is selected in the security policy.

Fix two SSL crashes.