Overview

In this release, we’ve made significant security improvements to the product. The new version is built on an updated version of Libraesva OS, which is maintained directly by Libraesva and derived from a Debian distribution.

For existing appliances, a migration and a change of virtual machine (VM) will be mandatory.

For on-premise appliances please refer to this documentation.

Security

• Full disk encryption: enabled full disk encryption for all default Archiver disks. Note that additional disks attached to the VM will not be encrypted.
• HSTS: enabled HTTP Strict Transport Security (HSTS) on nginx to enhance security.
• Spam attack prevention: the Archiver now only accepts journaling emails with a recipient format of archiver.*@ to prevent spam.
  • Accepted journaling emails (examples):
    • archiver@FQDN
    • archiver-tenant-name@FQDN
    • archiver-fqdn@FQDN
  • Rejected journaling emails (examples):
    • journaling@FQDN
    • tenant-name@FQDN
    • something@FQDN
• JWT Token Expiration: JWT tokens for administrator users now expire after 15 minutes, while non-administrator users’ tokens are valid for 2 hours.
• SSH root access removal: root password-based access over SSH has been disabled.
• TLS Security: the tls_ssl_options setting is now set to NO_RENEGOTIATION to mitigate potential CPU exhaustion attacks. Refresh token handling: the web app, progressive web app and the Outlook add-in no longer generate multiple refresh tokens for the same user.

Features

• PEC and IMAP connector: a new PEC and IMAP connector implementation boosts performance, making subsequent incremental syncs up to 10x faster compared to version 24.1. The old connector will be used for mail servers not supporting IMAP RFC 5162. As of October 2024, 95% of Libraesva customers are compatible with the new connectors.
• Connector cache management: admins can now see when and why a user’s sync is operating without cache and when the cache was last reset.
• Log volume retention: added retention configuration option for log volumes.
• Hypervisor disk management: improved options to attach and resize additional Archiver disks via the hypervisor console. Added option to detach disks. Engine disk expansion now works without Libraesva support.
• Optimized notifications: the first notification for connector sync issues is now skipped, reducing unnecessary alerts. If the issue persists after the next sync, a notification will be triggered.
• Cloud zip purge automation: the Archiver will automatically purge zip files for a tenant if deleted emails exceed 50GB on a cloud appliance.
• Notification search: a search field has been added to the notifications page for easier filtering.
• PST import panel: now displays a full list of uploaded PST files and their sizes.
• URL indexing: all URLs in newly archived emails will now be indexed (this feature is not retroactive).
• Connector scheduling: weekly scheduling is now available for connector syncs.
• Daily zip validation: each night, a random set of zip files are downloaded and validated to ensure storage consistency.
• Dashboard enhancements: added separate counts for queued and deferred emails, along with new connector and service status cards for on-premise appliances.
• Disk usage flexibility: reindex jobs with normal priority can now use the engine disk without requiring additional disk mounting.
• Increased maximum export size: the maximum export size has been increased to 50GB.
• Job completion notifications: admins will now receive email notifications when an import job completes successfully.
• Sync and cleaning scheduling: connector sync and cleaning operations are now be scheduled separately, giving the Archiver maximum flexibility. Up to 4 cleanings can run in parallel. Connectors can start cleaning for a specific user only after the first sync completes.
• SMTP test logs: logs are now displayed when an SMTP test fails.
• Connector cleaning status: added a new section to the connector status page dedicated to the connector cleaning feature.

Improvements

• Tenant report metrics: the “Total Compressed Size” column in tenant reports now displays values in GB.
• Manticore pre-caching: improved Manticore’s automatic restart by allowing more time for the engine to pre-cache indexes.
• Email index repair: the archiving process is fully suspended during index repairs and resumes automatically once completed.
• Purge process efficiency: optimized purge processes for improved download and upload speeds.
• Mailbox license count: when the Archiver is unable to fetch or validate users for a PEC/IMAP connector (for example for invalid credentials), the total number of users attached to the connector is considered when computing used licenses for Archiver with mailbox based licensing.
• License usage calculation: improved used licenses calculation, taking into account users attached to connectors with disabled automatic folder sync and PEC/IMAP connectors unable to validate users.
• Disabled IPv6: appliances are now distributed with IPv6 disabled by default.
• Firewall page speed: reduced the time required to load the firewall page.
• Legacy Microsoft 365 connector: removed the legacy Microsoft 365 connector. The Graph connector is now mandatory for Office 365 integrations.
• Hostname update: automatically add Archiver hostname to /etc/hosts in order to prevent Outlook addin login issue for Archiver hosted privately in a LAN
• Improved disk notifications: disk space alerts now consider both percentage and absolute free space values.
• License overuse info: storage-based license notifications now include purgeable space details and time tracking for overuse conditions.
• Postfix control post-update: if Postfix was suspended before an update due to critical disk usage or high email queues, it will remain down after the update.
• Multiple connectors sync for same user: sync is allowed for the first connector only and a notification is triggered.
• Deferred email cleanup: deferred emails without associated tenants are now automatically deleted after 40 retries.
• Filesystem checks on reboot: filesystem consistency checks and repairs are now run automatically during reboots.
• Clickable license card: the license card in the dashboard is now clickable and links to detailed license information. -Libraesva cloud volumes warnings: warnings are now hidden since those volumes are handled directly by Libraesva support team in case of any issue.
• License overuse: in case of license overuse, show from how much time the Archiver is running in license overuse.
• Connector sync queue: prevented overflow in the sync queue for connectors or users with long names.
• Tenant page load time: reduced loading time for the tenants page on MSP appliances with a large number of tenants.
• PST import safeguard: prevented PST imports when no tenant is configured.
• Job ID display: the job ID is now displayed for currently executing jobs.

Bugfix

• fixed connector running users list not showing elements for tenant admins
• fixed LDAP validation failing when editing existing LDAP connections
• fixed PST skipped emails modal automatically open when opening PST batch import job details
• fixed inactive user connector notifications not honoring notification snooze settings
• fixed IMAP connector showing wrong users number when removing a user from users credentials list
• fixed search interface allowing to save a bad configured search with missing parameters

Breaking changes

• journaling emails not sent to archiver.*@ will be automatically rejected. Please ensure you configured journaling based on docs.libraesva.com
• support for OpenStack and RackSpace (which was deprecated in v24.1) has completely been removed
• if you use SPF flattening on your domain, please ensure to select Microsoft or Google provider in the Archiver listener configuration

API breaking changes

• APIs /api/v1/administration/sphinx_index have been moved to /api/v1/administration/manticore_index
• APIs /api/v1/administration/disks have been completely refactored. Please check API documentation.
• APIs /api/v1/administration/firewall/start and /api/v1/administration/firewall/stop have been removed.
• APIs /api/{version}/administration/system_status/start, /api/{version}/administration/system_status/restart and /api/{version}/administration/system_status/stop have been removed.

 

Minor updates

v24.9.3918 released on 2024-12-30

• connector queue: added button to empty queue
• connector page list: improved by showing connector type and enabled features
• IMAP connector: skip invalid IMAP messages with UUID = 0
• import and batch import: allow to import .tar.gz archives
• Outlook Addin: fixed automated login when username is different from principal email address
• Google connector: fix cleaning procedure for email with malformed message ID
• swap file: dynamically handle based on appliance size
• audit log: record impersonating user when fetching, forwarding, restoring or deleting emails
• audit log: allow to download logs as CVS
• new volume creation: fixed active toggle on volume form
• backup for cloud appliances: fixed temporary error when uploading to Libraesva Storage 2
• historical users: fix alias and delegated users recording
• tenant hard delete: automatically run database optimization after a tenant is deleted
• indexing engine: gracefully handle indexing engine restart after a temporary issue
• LDAP: fixed login for LDAP users
• LDAP directory service: gracefully handle temporary issue during LDAP validation
• roles: fixed custom roles migration from v24.1 to v24.9
• dashboard: fix notification section not scrolling
• Archiver update: reduce required time by 60%
• batch import jobs: fixed webapp failing to retrieve logs
• whitelabeling: fix custom logo upload
• Wasabi volumes: added CA Central 1 (Toronto), EU Central 2 (Frankfurt), EU West 2 (Paris), EU West 3 (London), EU South 1 (Milan), AP Southeast 1 (Singapore) and AP Southeast 2 (Sydney) endpoints

v24.9.3931 released on 2025-01-16

• email fetch: improved performance during zip validation
• PST batch import: fixed import of files containing special characters in filename
• IMAP: handle mailserver error response result when fetching message headers
• connector cleaning: improved feedback when cleaning fails due to mailserver failure
• O365 login: do not consider 365 directory service history when picking users for login

v24.9.3972 released on 2025-01-28

• restored support for Samba, which was temporary removed on v24.9
• introduced support for AWS S3 volumes implementing object lock
• automatically tag all files uploaded to volumes (supported only for Wasabi)
• improved notifications section by adding customer filter and filters for all, active, unread and snoozed notifications
• added button to copy OTP secret to clipboard when configuring MFA
• allow custom roles with USERS_W permission to assign basic user role
• ensure there’s 1 batch import job per customer maximum
• fixed deferred queue not showing email details
• fixed restore button showing up for Graph connectors
• fixed SFTP volume validation when not inserting share
• fixed job page not visible by tenant admins and tenant auditors

v24.9.4003 released on 2025-02-05

• license page: better show license information and license features
• tenant licensed mailbox list: show unique address list when connector is not configured
• tenant report: do not consider deleted email when showing tenant emails count
• export by folder: create whole directory structure instead of the single folder to export
• legal hold rules: apply rules to new email every 15 minutes

v24.9.4017 released on 2025-02-11

• fixed PEC connector marking as read PEC emails for Aruba and Register mailboxes
• fixed PST import not working for archives with filename including spaces
• fixed tenant report generation for Archivers with more than 20TB archived emails

v24.9.4045 released on 2025-02-26

• connectors section: introduced connector synchronization time tab
• mailbox licensing model: introduced warning in tenants page when exceeding average mailbox storage
• security bundle: enable by default for new tenant if license includes it and it’s not multi-tenant
• retention rules section: introduced info message if a legal rule is active
• IMAP connector: ensure credentials test when configuring connector is performed as the one performed by connector sync
• VMware 8: fixed integration with backup tools
• connectors queue: fixed queue visibility for tenant admins
• mailbox delegation: trim spaces when using mailbox delegation in search; fixed delegation to historical users
• FTP volumes: fixed integration with FileZilla by enabling ignorePassiveAddress for passive mode connection
• disks section: fixed scsi information for proxmox hypervisors
• deferred messages: fix email headers not visible from deferred queue

v24.9.4104 released on 2025-03-11

• v24.1 migration tool: released tool for migrating from v24.1 (refer to this guide)
• LDAP: validation is now allowed without configuring a user role
• Journaling: improved handling of Google unverified forwarding
• PEC connector: fixed an issue where the cleaning phase did not delete emails on certain mail servers
• Reports: fixed a bug where report scheduling was not applied after configuring a new report
• Connector user synchronization: fixed the cleaning panel not displaying completed sync
• PST import: a popup now appears when attempting to start a PST import without configuring an email owner
• Inactive connector notification: prevent notifications from being sent for users who are no longer active
• Archived emails counter: numbers are now formatted based on the local language
• PST import: fixed an issue with matching archiving policies

v24.9.4157 released on 2025-03-26

• SAML: re-enabled SAML authentication support, which was temporarily unavailable in version 24.9
• Graph connector: handle new Microsoft 365 responses for token expiration due to recent Graph API changes
• tenant admin search: tenant admins can now access their own and delegated mailboxes without requiring OTP
• customers page: enhanced the loading speed of the customers page
• connector last update: fixed the last update date display for single users in the connector, now showing the last event date
• failed connector sync restart: resolved an issue where auto-restart was not working in certain cases after a failed cleanup
• email PDF download: fixed an issue preventing email downloads in PDF format
• failed PST import restart: fixed an issue identifying PST list to reprocess

v24.9.4175 released on 2025-04-07

• Customer selector: enhanced usability by adding search functionality for easier customer selection
• SPF resolution: ignored invalid domains during SPF checks for SPF listeners
• Connector cleaning: reduced time required to perform validation before deleting messages from mailboxes
• Connector clear queue button: now clears the queue for the selected customer only, if any customer is chosen
• Deferred queue action buttons: added feedback after button clicks for better user interaction
• Import batch folder tree: fixed an issue causing overflow in folder tree view
• SAML: fixed permission issues during the setup of new SAML integrations
• LDAP directory service validation: resolved validation issues for LDAPs directory service configurations
• Job log compression: enhanced log compression to save disk space while maintaining readability

v24.9.4185 released on 2025-04-14

• Migration from v24.1: enabled support for migration when the v24.1 Archiver uses SAML authentication
• Connector report jobs: improved user interface feedback by consistently displaying a progress bar during execution
• Volume migration: enhanced performance when migrating to FTP target volumes
• Scheduled reports: fixed an issue with filtering by customer in the selector
• Volume deletion: solved a bug that prevented deletion of data volumes

v24.9.4249 released on 2025-05-05

• Migration from v24.1: requires Archiver wizard completion before starting migration from v24.1
• IP listeners: added support for multiple listeners on the same IP for different tenants
• Advanced tenant configuration: tenant-exclusive archiver-dedicated journaling email address is now available
• FTP volumes: improved validation by displaying validation errors correctly
• Connector cache reset information: now displays the datetime based on the local timezone
• IMAP connector: no longer clears its cache when users are added or removed
• Firewall configuration: improved UI feedback when editing firewall configuration
• Email restore: display loading information message when picking a folder to restore emails
• Archiving rules: added details information messages when editing or adding archiving rules
• Logs: enhanced logs file rotation to save disk space
• LDAP form: added a warning about the maximum length of supported characters for LDAP queries
• IMAP connector: gracefully handled IMAP issues when dealing with invalid IMAP resources
• Audit log: hide the IMAP connectors’ password from audit logs
• API: restored the authentication button on API documentation
• Search: When accessing a tenant with Privacy Password set, users will immediately see the list of emails without needing to click on the “All Mailboxes” button after entering the OTP code
• Tenant wizard: fixed an error in the tenant wizard during volume configuration
• Import batch relaunch: fixed an issue that wasn’t creating a new job
• IMAP connector: handled an invalid IMAP UID=0 scenario, avoiding an IMAP connector sync crash
• LDAP users cache: fixed an issue with LDAP users caching
• SMTP test: fix validation error for Archivers hosted on UpCloud
• Import batch: fixed an issue with batch importing archives protected by passwords

v24.9.4262 released on 2025-05-20

• Postfix configuration: the smtpd_banner setting is now correctly applied after updating the Archiver hostname
• Directory service – user customization: inactive connector notifications are now skipped for users explicitly excluded from synchronization
• Connector user sync list: the “Reset cache” button is now hidden for users not supported by connector
• Journaling via authenticated SMTP: fixed issue causing messages not to be journaled correctly
• Email download: fixed issue where downloaded emails in PDF format were incomplete or unavailable

v24.9.4276 released on 2025-05-26

• Connector sync and cleaning: improved task separation for better clarity and control
• SMTP journaling setup: prevented creation of duplicate credentials during configuration
• SMTP configuration: password field is now hidden by default in the UI
• Firewall configuration: fixed issue where firewall page showed no information after updates

v24.9.4296 released on 2025-06-16

• Tenant list: added an alert for tenants exceeding usage limits
• Audit logs: added UTC timezone indication on the audit logs list page
• Connector scheduling: added scheduling time specification for weekly frequency
• Let’s Encrypt job logs: improved logging by displaying more detailed messages
• PEC providers: fixed issue where dropped connections caused Archiver connectors to remain indefinitely pending, blocking synchronization
• Dashboard filters: fixed connector count not filtered by customer for tenant admins
• Export jobs: fixed an issue that prevented the restart of failed exports from the job list
• SMTP test: fixed incorrect feedback display on certain hypervisors
• Large attachments: fixed an issue triggered by emails with large attachments
• Rsyslog: fixed issue with configuration not being correctly applied

v24.9.4300 released on 2025-06-23

• Certificate management: fixed an issue affecting certificate renewal. On-premise Archivers may receive a notification prompting certificate update
• Connector sync: users previously marked as in sync are now flagged as “sync suspended” due to version update
• Remote support: fixed an issue where the support channel would not open under certain conditions
• Log rotation: improved log rotation mechanism to prevent excessive disk space usage
• Index disk usage: improved disk monitoring and introduced automatic suspension of the indexing engine to prevent reaching 100% disk usage
• SNMP: fixed OID for retrieving Archiver versions and improved overall performance for all OIDs
• Tenants page: fixed false positive alerts for overused tenants

v24.9.4301 released on 2025-06-25

• Connector health system: improved periodic monitoring (every 6 hours) to detect stuck connections with mail servers and automatically terminate affected sync
• Connector inactivity check: improved behavior by skipping directory services with invalid credentials, avoiding repeated notifications
• SNMP: fixed OID issue preventing correct retrieval of queued email count when Postfix is down
• PST import: fixed extraction issues with PST files containing Microsoft 365 calendar items
• Certificate notifications: prevented multiple alerts for the same certificate issue from release v24.9.4300
• Microsoft 365 configuration: fixed display issues on the configuration page under specific conditions

v24.9.4304 released on 2025-06-30

• Indexing engine: improved daily optimization to better preserve disk space
• SMTP journaling listeners: fixed an issue where SMTP-type listeners did not correctly recognize ownership based on configured credentials
• Connector notification snooze: fixed an issue that prevented proper snoozing of connector notifications for individual users

v24.9.4305 released on 2025-07-14

• Zimbra connector: fixed synchronization issues when both global Zimbra ID and local UUID are invalid
• Microsoft 365 authentication: improved login performance by caching authentication results
• Archiver nightly update: optimized update process and limited connector synchronization pause to necessary cases
• Connector scheduling: improved efficiency by avoiding unnecessary queuing of all connector users when updating a single connector’s frequency

v24.9.4319 released on 2025-07-23

• S3 storage: exposed region setting and added flag to enable path-style URL access
• IMAP/Roundcube: fixed issue with skipping synchronization of spam and draft folders
• Reindex preview: added timeout handling to avoid hanging operations
• Google connector: fixed issue causing excessive user fetch connections
• Pre-freeze and post-thaw scripts: improved compatibility and performance
• PST import job: fixed issue where configuration details were not displayed

v24.9.4325 released on 2025-08-11

• Email index repair tool: improved performance for faster repair operations
• IMAP connector: prevented duplicate logging of user-deleted emails already reported by EA on some servers
• Folder structure: fixed issue where directory service equivalence settings were not respected
• Postfix: fixed issue where service did not restart after EA suspension in certain cases
• PST import popup: fixed issue where full information was not displayed
• PST batch import: fixed issue preventing restart when no import had been started
• Connector scheduling: fixed issue preventing automatic start on newly created connectors

v24.9.4345 released on 2025-08-25

• Appliance wizard: fixed redirection to login after completing the wizard
• Azure integration: improved compatibility with Azure tools for network configuration
• Download from volume: enabled PST download even when MIME type is not correctly set
• Export: fixed issue preventing PST export when emails contained large inline images
• Database: optimized queries and internal processes for better performance

v24.9.4381 released on 2025-09-11

• New v25.8: enabled upgrade to version 25.8 on early adopter channel
• Notifications snooze: fixed snooze option not being applied to solve error notifications
• Zip validation: solved temporary issue in validation engine after migration from v24.1

v24.9.4449 released on 2025-10-01

• Upgrade to v25.8: reduce time required to upgrade to version 25.8
• Dashboard major update alert: introduce alert message to notify about new major version available
• Email search: fixed forward and delete buttons not working correctly in legacy search

v24.9.4460 released on 2025-10-06

• Upgrade to v25.8: now available also for stable release tier
• Email search: fixed forward and delete buttons for legacy search