3.3.4

• fix(security): refuse bare LF lines in DATA (#3616)
• fix(security): reject pipelining after DATA
• fix(connection): bound synchronous recursion
• fix(security): preserve dot-stuffing on relay
• fix(security): block prototype-chain lookups (#3615)
• fix(security): harden against prototype pollution:
  • auth_flat_file, auth_vpopmail, lmtp, smtp_forward
• fix(auth_proxy): don't mutate hosts array
• fix(auth_base): read the config set in the .ini
• change(auth_proxy): load shared tls_socket
• deps(several): bump to latest
• doc(CoreConfig): update stun docs (#3613)
  related to haraka/haraka-net-utils#109