Main features

This release delivers one of the most substantial architectural upgrades in the product’s history. We have re-engineered core subsystems to push the platform far beyond previous performance ceilings, with a particular focus on indexing, ingestion throughput, and large-scale storage workflows. The result is a faster, smarter, and more resilient Archiver, capable of sustaining heavy workloads with ease while preparing the foundation for future innovations.

New indexing engine

We introduced a redesigned version of our indexing engine that elevates speed, reliability, and operational consistency across the board.

The new engine processes data with reduced latency, supports much faster ingestion rates, and executes queries with higher efficiency—even under sustained load.

Through continuous internal optimizations, smarter memory utilization, and robust failure-resilience strategies, the indexing layer now delivers:

• faster indexing of new items
• more responsive and stable query execution -improved behavior under peak concurrency
• better scaling on large datasets
• lower operational overhead and smoother long-term performance

This is not just an incremental improvement: It’s a foundational leap that enhances nearly every part of the platform relying on search and retrieval.

Fully parallel email ingestion

Until version 25.8, each tenant could process only one email at a time. Even though ingestion was fast, this single-threaded model could still become a bottleneck, especially during first-time imports or heavy bursts of incoming messages.

We have now overhauled this architecture from the ground up. The Archiver can ingest multiple emails simultaneously for the same tenant, unlocking substantial performance gains in real-world workloads.

Key improvements:

• true multi-email parallel ingestion per tenant
• dynamic workload adaptation: the Archiver intelligently detects load and automatically tunes its parallelism to maximize resource usage
• massive improvements in first-time ingestion speed
• better CPU and I/O distribution across the system
• smoother ingestion under sustained or unpredictable spikes

This redesign eliminates the previous serialization point and transforms ingestion throughput into a scalable, high-performance pipeline.

Async volumes and high-speed caching-write Layer

Email archiving involves periodic packaging: every N ingested emails are bundled into an encrypted ZIP file and uploaded to all active data volumes.

In high-ingestion scenarios—especially when uploads are slow, this upload phase could become the limiting factor, forcing the Archiver to wait for storage operations to complete before continuing.

To remove this bottleneck, we introduced a new advanced storage architecture featuring caching-write volumes and async upload volumes.

How it works:

1. Immediate local write Encrypted packages are first written at high speed to a local caching volume, allowing ingestion to continue without interruption.

2. Background asynchronous upload Archiver then handles the distribution of these packages to all active data volumes asynchronously, in the background, without slowing down ingestion.

3. Automatic cleanup Once uploads are successfully completed, files are automatically removed from the caching-write volume.

Benefits:

• upload latency no longer impacts ingestion speed
• dramatically smoother ingestion during heavy workloads
• optimized use of fast local storage
• more predictable throughput, even with slow or remote storage backends
• clear separation between ingestion performance and storage performance

This advanced volume configuration completely eliminates waiting time tied to remote uploads and enables the Archiver to maintain consistently high throughput.

Note: this feature requires appropriate licensing.

Features

• jobs: allow naming jobs to simplify tracking and speed up identification across import, export, and reindex workflows
• jobs page: added pagination, search by job name, and filtering by job type to improve navigation in large job histories
• running job modal: increased its size for better readability, remove the info icon, and allow opening job details by clicking anywhere on the job tile
• new job handling: ensure that newly launched jobs instantly appear as the first entry in the running-job popup for immediate visibility
• job progress percentage: always display two decimal digits to provide clearer insight into the progress of large operations
• volume sections: significantly improved page loading speed, add pagination, enable searching by volume name, and introduce filters by storage type and usage
• volume types: introduced a new dedicated Ionos volume type to support environments using Ionos storage
• reindex metrics: show ZIP download speed, estimated time to download, projected completion date, and extended performance insights
• reindex recovery: allow relaunching failed reindex jobs so that only failed ZIP files are reprocessed
• pst batch import: added a comprehensive panel showing total extracted emails, ingestion rates per hour, imported GB per hour, total archive size, imported size, remaining size, and average email size; include estimated completion date, categorized archive lists (running, pending, completed, failed), and a search panel for locating specific archive files
• pst import: show imported emails per hour and estimated completion date directly within the job view
• export speedup: accelerate exports when emails are stored on local volumes by better leveraging local disk performance
• export metrics: show exported emails per hour, total exported size, average email size, and estimated completion date in the job panel
• volume migration metrics: display total archive size to migrate, migration rate per hour, migrated size, and GB-per-hour throughput
• disk email notification: include disk capacity details in alerts, showing used GB and percentage utilization
• email ingestion page: introduced a new page with historical growth charts for archived emails and storage usage, plus a chart showing recent ingestion rates
• folder structure maintenance: added an automatic scheduled service that keeps mailbox folder structure data clean for faster user navigation
• let’s encrypt: auto-fill the email field with the Libraesva default address when enabling Let’s Encrypt on cloud appliances
• connector error handling: implemented a new system for detecting, parsing, and presenting known errors such as rate limiting
• connector severity tuning: reduced notification severity for temporary conditions like Microsoft 365 rate-limiting
• dns check: introduced a nightly DNS health check to ensure the appliance is resolving correctly
• storage usage report: added a new report tracking storage consumption per tenant over time
• legal hold coverage report: added a report showing how many emails are currently protected by each legal hold rule
• dynamic sizing for database and webserver: introduced automatic resource scaling for both components so that configuration adjusts seamlessly whenever appliance resources are modified
• IMAP and PEC connector validation: refined validation checks to deliver clearer, more actionable feedback when connection issues occur
• volumes validation: updated validation logic to provide more meaningful diagnostics and clearer guidance in case of volume-related problems
• purgeable space update: automatically refresh the displayed purgeable space when a purge job completes, avoiding outdated cached values and ensuring the customer page always reflects accurate data, with periodic updates during the purge process when possible
• search filters: added quick-access filters to easily search emails from today, yesterday, or recent days
• local user aliases: allow creating aliases that point to users managed through the directory service
• job dependencies: added a clear UI status indicating when a job is waiting for another job to complete, with graceful fallbacks using started at and created at timestamps
• NTP configuration: introduced a dedicated page to configure and validate time synchronization settings
• delete protections: added UI errors when attempting to delete emails newer than the latest legal-hold application run
• job termination safety: added a confirmation step before allowing a job to be force-killed
• cluster notifications: added automatic email notification when the cluster setup completes
• volume migration insights: added metrics showing remaining archives, remaining size, and both source and destination volume names
• reboot detection: detect jobs interrupted by a reboot and mark them as failed with a dedicated message
• notifications: made hostnames in email notifications clickable for faster access to the appliance

Security

• local user password: increased security by enforcing a minimum password complexity requirement
• legal hold protection: show a clear warning when attempting to delete emails newer than the most recent legal-hold application job

Improvements

• report email field: improved the input field for entering email addresses so it takes advantage of all available space
• audit log: always display human-readable descriptions instead of raw action entries to make event interpretation clearer
• kill jobs: avoid sending email notifications when jobs are manually terminated from the UI
• login through 365: replaced the Graph API icon with the official Microsoft 365 logo for clearer visual alignment
• snmp section: updated the UI layout to make it easier to understand how to add new SNMP settings
• pst batch import: enhanced validation for unsupported file extensions and provide a clear, specific error message
• disk threshold notifications: reviewed all thresholds, email notification content, and dashboard colors to ensure more consistent and accurate alerting
• external 365 address: automatically exclude external Microsoft 365 addresses from license counting and connector queues to avoid unnecessary processing
• license user count: improved background jobs to increase the accuracy, speed, and resilience of license-usage calculations
• indexing engine: improved cleanup of email content before indexing to prevent unnecessary token indexing and maximize indexing engine performance
• job metadata: clarified the distinction between created at and started at across the job system
• hypervisor console menu: refined the interface for better usability
• export diagnostics: increased logging verbosity to simplify troubleshooting during export operations
• PST import: increased the maximum number of PST files processed concurrently within a batch job to better utilize all available resources
• jobs page performance: switched to asynchronous data loading so the page renders faster, loading job details only upon details panel expansion
• M365 external mailboxes: automatically skip EXT mailboxes when queuing users for the connector
• cluster setup: enhanced the setup flow by guiding users through required firewall settings and validating them proactively
• cluster UI: improved the interface to more clearly present local and remote nodes information
• cluster disk guidance: clarified explanations around cluster-disk usage and detailed the correct configuration procedure
• cluster data model: highlighted that local disk contents are not replicated across nodes and that the passive node’s credentials will be overwritten during cluster setup
• indexing engine: updated the indexing engine page to also display customers without any stored emails
• attachment indexing: improved performance when parsing and indexing Office documents
• version visibility: enhanced the version page to reliably surface newly available minor updates, ensuring clearer upgrade awareness

Bugfix

• purge job UI: fixed a crash that appeared when launching a new purge job from the interface
• purge job stability: fixed a condition where the Archiver could become unresponsive when starting a purge job
• export: fixed an issue that occurred when exporting an excessively large number of files from a single archive

Breaking changes

• legacy search removal: remove the legacy search feature, originally deprecated in v23.6

Update notice

• folder-structure volumes: these volumes are no longer required, as folder-tree management is now fully handled internally by the Archiver. Existing folder-structure volumes are no longer used and can be safely removed manually. In the Libraesva Cloud environment, this cleanup will be performed automatically in the days following the update.

How to update

In Settings > System > General section, you can either update the Archiver immediately or schedule the update for the upcoming night.

Minor updates

v25.12.4784 released on 2025-12-15

• Migration job: added failed-archives counter and guidance on how to proceed when a job fails
• Cluster: improved setup procedure by displaying logs during cluster initialization
• Database configuration sizing: improved automatic sizing to better utilize available RAM
• Microsoft 365 configuration: fixed Managed by and Managing lists not displaying correctly when values contain uppercase letters

v25.12.4829 released on 2025-12-22

• Batch import job: improved logs by clearly showing which process is generating each log entry
• Batch import job: increased the maximum number of concurrent archive decompression processes to better utilize system resources
• Attachment indexing: added a cache layer to speed up indexing of the same attachment across multiple emails
• Attachment indexing: fixed an issue when parsing PDF files larger than 50 MB
• Email ingestion: improved performance when running single PST import jobs
• Index disk usage notifications: increased the threshold before sending warning emails to avoid premature alerts
• Running jobs panel: automatically adjusts the refresh frequency to avoid web server flooding when running large jobs
• Cluster page: improved UI with clearer instructions to open firewall ports before starting cluster setup
• Cluster status: improved cluster status visibility (enabled state, last sync, and peer node hostname)
• Cluster page: added visibility when cluster synchronization is currently running
• Cluster setup: automatically runs SSH connectivity checks and provides clear feedback in case of issues
• Cluster setup completion: sends an email notification when the initial cluster setup completes
• Cluster error: added email notifications in case of errors during cluster synchronization
• Cluster sync: UI is now always available on the passive node, even while cluster sync is running, and provides real-time feedback
• Cluster sync: checks proper disk sizing on the remote node before starting cluster synchronization
• Cluster certificates: fixed an issue on the passive node that could cause Let’s Encrypt certificate renewal failures

v25.12.4839 released on 2025-12-29

• PEC connector validation: added support for PEC mailboxes provided by Intesa
• Appliance services: improved dynamic sizing and resource computation to better utilize large appliances
• IMAP connector: reviewed connection parameters to improve security
• Attachment indexing: improved performance of PDF attachment indexing
• Jobs list page: batch import jobs completed with warnings are now displayed in yellow
• Single-file import jobs: fixed missing counter for errored emails
• Batch import jobs: increased supported file parallelism to better utilize resources on large appliances
• Batch import jobs: improved logging to clearly report download and archive decompression time and throughput
• Import and batch import jobs: optimized RAM usage during archive decompression and increased the maximum number of concurrent decompressions
• Index mismatch notification: fixed an issue that prevented email notifications from being sent in some cases
• Trusted timestamp: improved performance when applying trusted timestamp validation during email archiving finalization
• IMAP connector validation: fixed an issue that caused connector validation to fail even when user credential validation succeeded

v25.12.4881 released on 2026-01-07

• Graph, Google, and IMAP connectors: enhanced logging to clearly indicate why a user is not supported
• Connector folder structure synchronization: improved UI feedback to highlight that folder names containing emojis are not supported
• Connector scheduling: increased the maximum number of concurrent connector synchronizations to better utilize resources on large appliances
• Graph connector: improved warning messages when a mailbox has exceeded its Microsoft storage quota
• Zimbra connector: improved error reporting when the Zimbra account does not exist on the target server
• Attachment indexing: introduced automatic scheduled index optimization for the attachment indexing index
• S3-like volumes: improved error handling to simplify troubleshooting in problematic scenarios
• PST batch import: increased the frequency of checks for launching new download or archive extraction processes to maximize ingestion speed
• PST batch import: when relaunching failed PSTs, avoids reprocessing PST files that contain no emails
• Hypervisor console: improved feedback when the HA cluster is not included in the license
• Disk usage checker: prevented job termination in scenarios involving high index disk usage
• Pending jobs: improved UI messaging to clarify that pending jobs start only after currently running and queued jobs have completed
• Email restore: improved the restore panel to clarify that user impersonation is required to display available folders for the target mailbox
• Volumes page: fixed an issue with filters when changed multiple times
• Volumes page: now also displays log volumes and backup volumes
• Legal hold rules report: fixed reporting issues when multiple legal holds protect the same emails
• Web server: server version is now hidden to improve security
• CSP security: improved production bundle configuration to comply with Content Security Policy requirements

v25.12.4926 released on 2026-01-13

• Microsoft Outlook add-in: improve authentication to persist user sessions and reduce repeated login prompts by remembering the authenticated user
• PST batch import jobs: added tracking of already imported emails, not imported twice to prevent duplicate processing
• Async volume upload: improve throughput by parallelizing file uploads to better support appliances with high email ingestion rates
• Customer hard delete: extended the deletion process to include attachment indexing metadata, freeing additional disk space
• Purge jobs: updated purge operations to also remove attachment indexing metadata, reducing disk space usage
• Jobs page performance: improved page load times when batch import jobs contain thousands of files
• PST import validation: added a dedicated error message when attempting to import corrupted PST files
• Jobs UI: improved readability by formatting large numbers with thousands separators
• Volume migration jobs: enhanced estimation logic to provide more accurate job completion date predictions
• Volumes page: updated the UI to display all volume types, including log and backup volumes
• Batch import disk space handling: improved user feedback when jobs are terminated due to insufficient available disk space
• Firewall configuration page: enabled automatic page refresh after configuration updates are successfully applied
• Tenants page performance: reduced loading time when retrieving and displaying tenant information
• PST batch import logging: optimized log buffering to reduce disk I/O and improve performance when importing thousands of archives
• Cluster synchronization: optimized the cluster sync process to reduce synchronization time
• Cluster setup wizard: improved the guided setup experience by adding contextual hints during configuration
• License usage reports: fixed generation issues affecting scheduled reports
• Jobs page stability: resolved a crash caused by excessively large data fields leading to maximum execution time errors
• ZIP validation: fixed an issue where the ZIP validation directory was not created correctly
• API documentation: fix the login endpoint mock and improve parameter value descriptions

v25.12.4972 released on 2026-01-19

• Timezone settings: added a new UI page to change the system timezone directly from the web interface
• Attachment indexing: improved performance when indexing large attachments
• Tenants page: optimized caching to reduce page load times
• Volumes page: optimized caching to improve page load performance
• Report generation: enhanced progress feedback to provide more details without impacting job execution time
• Cached emails: increased disk space dedicated to email caching to speed up average email retrieval in the web UI
• Purge process: optimized disk usage by immediately removing temporary files created during purge operations on ZIP archives
• Saved searches: increased maximum query length from 255 to 1024 characters
• Saved search validation: added clear error feedback and field highlighting when queries exceed the maximum allowed length
• API documentation: improved and clarified descriptions for all API endpoints
• Export jobs: enhanced error messages when exports fail due to upload issues on export volumes
• Custom certificates: added more detailed log messages when certificate uploads fail
• Connector sync: automatically restore the connection to the indexing engine after timeouts caused by slow IMAP servers
• Rsyslog configuration: fixed issues when applying configurations migrated from v24.1
• Index mismatch notification: improved messaging to explain automatic recovery attempts and eventual notification removal
• Cloud appliance backups: restricted admin editing of backup rules and volumes; cloud volume backups are now configuration-only
• Per-user reports: unified equivalent users from different directory services to avoid duplicate entries
• PST batch import: fixed import failures caused by large HTML attachments

v25.12.4981 released on 2026-01-22

• PST batch import: increased the maximum number of concurrent jobs on large appliances
• Audit logs: masked sensitive data such as secrets and passwords in audit logs
• Email view: fixed UI overflow issues when viewing EML email attachments
• Email restore: fixed an issue where the restore modal did not correctly display the mailbox folder list in some cases
• Retention rules: fixed an out-of-memory issue occurring when retention rules were forcibly applied from the hypervisor console

v25.12.4983 released on 2026-01-26

• Attachment indexing: limited PDF text extraction to the first 50 pages to improve indexing performance
• Indexing engine: improved handling of integrity mismatches under high email archiving load, allowing archiving to continue while automatic recovery is attempted
• Audit logs: improved action descriptions for better clarity and traceability
• Disk cleanup: enhanced nightly cleanup to reclaim additional disk space
• PST import: improved job performance when importing folder structures

v25.12.5009 released on 2026-02-02

• Migration from v24.1: introduced a hypervisor console upgrade tool enabling direct upgrade from v24.1 to v25.12, skipping intermediate versions (v24.9 and v25.8)
• PST batch import jobs: successful jobs with partial archive errors are now highlighted in yellow for better visibility
• PST batch import: improved logging with a dedicated log file generated for each imported PST
• PST import decompression: added detection and parsing of OOM-killer events, with detailed diagnostics displayed in the UI
• Outlook add-in: users can now authenticate even when directory service authentication is disabled globally but enabled for specific accounts
• Export jobs: fixed upload-phase failures occurring with multiple concurrent ZIP-based export jobs
• Email index repair tool: enhanced hypervisor console tool to automatically run fixes only for affected customers
• XML attachment indexing: improved XML parsing performance and reduced indexing time for large attachments
• IMAP connector: added validation and notification when linked IMAP credentials no longer exist
• IMAP connector: improved failure notifications by including the specific IMAP error returned by the server
• Deferred emails page: clarified retry policy, including retry frequency and maximum attempts for journaling email imports
• Connector queue clear tool: now displays customer information when clearing queues for a specific tenant
• Database cleanup: optimized daily automatic cleanup to maintain higher long-term database performance

v25.12.5069 released on 2026-02-10

• Integrity check: introduced a nightly validation task that verifies archive ZIP alignment across storage volumes and generates a notification if inconsistencies are detected
• Cluster dashboard: improved service cards to clearly indicate services intentionally disabled on the passive node
• Export jobs: jobs are now automatically marked as failed when connectivity issues with the export volume occur
• Report jobs: jobs are marked as errored if a failure occurs during email delivery
• Tenants page: added an alert in the tenant mailbox list when license count falls back to unique email addresses due to missing connector configuration
• Cloud appliances: implemented automatic cleanup of legacy folder-structure volumes and related files. These volumes have been deprecated since v25.12 and are no longer used
• Scheduled reports: improved error logging when generating reports for all tenants
• Index integrity mismatch: resolved a race condition that could cause a deadlock when the Archiver attempted automatic remediation
• Upgrade from v25.8: fixed a race condition that could temporarily slow down the archiving process immediately after upgrading to v25.12
• Export downloads: resolved timeout issues affecting the download of large exported files
• Microsoft 365 delegation: fixed an issue preventing correct application of the “Managed by” configuration
• User profile configuration: resolved an issue where the alias edit action was not functioning correctly
• PST batch import: fixed an issue where accessing logs for pending files could cause the UI panel to crash
• Email search within folders: fixed a regression that caused recent emails not to appear in mailbox folders

v25.12.5112 released on 2026-02-18

• IMAP connector: improved error notifications during synchronization by providing more detailed diagnostic information
• Nightly disk cleaner: enhanced the cron task to perform deeper cleanup of metadata related to deleted messages
• Disks page: improved SCSI identifier mapping on Proxmox hypervisors to ensure accurate disk correlation
• Azure first boot: improved initial network configuration by relying more consistently on the Azure agent to ensure correct interface setup
• Cluster status page: extended the view to display the full set of available cluster status information
• Cluster switchover: introduced a cluster health check that runs before initiating a switchover to prevent operations in degraded states
• Storage dashboard charts: corrected the computation of uncompressed storage values when archived items are associated with invalid email addresses
• Backup volumes page: removed the backup counter column, as the value is always zero and does not provide meaningful information
• Disk expansion scripts: refined the available disk list by excluding references to detached disks
• Volume credentials check: fixed false-positive notifications caused by temporary connection issues
• API documentation: expanded the API documentation with additional details, clarifications, and usage examples to improve integration and developer guidance

v25.12.5147 released on 2026-02-23

• Migration from v24.1: increased log verbosity to facilitate identification of issues related to low network connectivity during upgrades
• IMAP connector: improved detection and reporting of synchronization failures caused by invalid on-disk IMAP mailbox structures
• Nightly disk cleaner: enhanced the scheduled cleanup task to remove legacy folder-structure metadata files more reliably
• Connector scheduler: resolved a race condition that could cause the scheduler to repeatedly attempt to start the same connector synchronization when a dedicated unit was stuck
• Connector sync: improved recovery logic to ensure a new synchronization can start correctly even if a previous run terminated abnormally and left inconsistent state data
• Disks page: corrected SCSI controller mapping for additional disks attached to virtual machines to ensure accurate representation in the UI

v25.12.5169 released on 2026-03-10

• Google integration: improved handling of edge cases in listeners, enhancing detection and archiving of messages originating from unverified forwarding sources
• Indexing engine: optimized indexing processes to reduce overall disk space consumption
• IMAP connector validation: increased connection timeout to 30 seconds to improve compatibility with slow or high-latency mail servers
• Backup volumes: added support in Libraesva Cloud for customer-defined backup volumes and rule-based backup configurations
• API documentation: improved and clarified documentation for email export–related API endpoints
• Privacy Officer UI: improved timer rendering to provide smoother and more consistent countdown updates
• Privacy Officer: corrected email notifications to display the actual remaining OTP validity time instead of a fixed 15-minute value
• Privacy Officer: resolved issue causing empty reports at the end of the Privacy OTP workflow

v25.12.5234 released on 2026-03-16

• Full index disk notification: improved the computation of indexing engine chunks size by excluding temporary files, resulting in more accurate disk usage reporting
• Volume deletion: fixed an issue where the UI incorrectly displayed a warning that a volume could not be deleted, even when all files had already been successfully stored on other volumes

v25.12.5265 released on 2026-03-23

• Retention rules applier: significantly improved delete handler performance for large-scale operations (>100,000 emails), ensuring consistently high throughput without degradation during execution
• Listeners: refined last activity tracking to update timestamps only when an email is archived, avoiding updates for emails discarded by archiving rules
• Connector folder sync: improved mailbox folder synchronization to prevent merging folders with identical names originating from PST imports when located at different hierarchy levels
• M365 delegation: improved mailbox delegation engine by using case-sensitive email addresses; Archiver now enforces case-sensitive handling in alignment with M365 behavior
• Tenants page: resolved an issue where connectors linked to LDAP configurations were not displayed in the connectors list modal
• Disks page: resolved a malfunction occurring with certain cloud providers that do not expose SCSI disk information

v25.12.5323 released on 2026-03-30

• Disks notification emails: enhanced notification content by adding a direct link to the online documentation, improving clarity and reducing friction in issue interpretation
• Customer last archived emails: optimized timestamp computation for the most recent archived email per tenant, significantly reducing processing time and improving overall system efficiency
• Archiving rules: resolved an issue where wildcard patterns were not correctly honored during email address matching, ensuring rules now apply consistently across all supported formats

v25.12.5400 released on 2026-04-14

• Import batch jobs: improved error notification emails by limiting the error description length when multiple failures occur, preventing oversized messages and enhancing readability
• Log volumes: resolved an issue during log file uploads that prevented newly generated log files from being correctly transferred
• Email view: fixed a rendering issue when displaying emails with missing header address values, ensuring consistent visualization even with incomplete metadata

v25.12.5519 released on 2026-05-11

• Connector cleaning: improved logging when email deletion is skipped due to Archiver validation checks, ensuring that messages are removed from the mailbox only after successful archiving
• Export jobs: improved overall performance through enhanced memory management and more efficient folder structure computation
• Export jobs: fixed an issue causing all emails to be incorrectly included in infected email archives when antivirus scanning was enabled during export
• API documentation: improved documentation for connectors POST API actions
• Dashboard storage chart: fixed an issue where the last day value was missing from the storage usage chart
• Notifications: fixed a race condition preventing the “90% usage of your Libraesva Email Archiver license” notification email from being sent
• Security: resolved CVE-2026-31431, CVE-2026-43284 and CVE-2026-43500

v25.12.5550 released on 2026-05-19

• Custom roles: fixed an issue preventing users with custom roles from assigning other custom roles
• Security: resolved CVE-2026-46333