Libraesva EA v24.9: Release Notes – LibraCyber - Centre d’assistance

Overview

In this release, we’ve made significant security improvements to the product. The new version is built on an updated version of Libraesva OS, which is maintained directly by Libraesva and derived from a Debian distribution.

For existing appliances, a migration and a change of virtual machine (VM) will be mandatory.

For on-premise appliances please refer to this documentation.

NOTE: version 24.9 lacks support for Kerberos.

Security

Full disk encryption: enabled full disk encryption for all default Archiver disks. Note that additional disks attached to the VM will not be encrypted.
HSTS: enabled HTTP Strict Transport Security (HSTS) on nginx to enhance security.
Spam attack prevention: the Archiver now only accepts journaling emails with a recipient format of archiver.*@ to prevent spam.
- Accepted journaling emails (examples):
  - archiver@FQDN
  - archiver-tenant-name@FQDN
  - archiver-fqdn@FQDN
- Rejected journaling emails (examples):
  - journaling@FQDN
  - tenant-name@FQDN
  - something@FQDN
JWT Token Expiration: JWT tokens for administrator users now expire after 15 minutes, while non-administrator users’ tokens are valid for 2 hours.
SSH root access removal: root password-based access over SSH has been disabled.
TLS Security: the tls_ssl_options setting is now set to NO_RENEGOTIATION to mitigate potential CPU exhaustion attacks. Refresh token handling: the web app, progressive web app and the Outlook add-in no longer generate multiple refresh tokens for the same user.

Features

PEC and IMAP connector: a new PEC and IMAP connector implementation boosts performance, making subsequent incremental syncs up to 10x faster compared to version 24.1. The old connector will be used for mail servers not supporting IMAP RFC 5162. As of October 2024, 95% of Libraesva customers are compatible with the new connectors.
Connector cache management: admins can now see when and why a user’s sync is operating without cache and when the cache was last reset.
Log volume retention: added retention configuration option for log volumes.
Hypervisor disk management: improved options to attach and resize additional Archiver disks via the hypervisor console. Added option to detach disks. Engine disk expansion now works without Libraesva support.
Optimized notifications: the first notification for connector sync issues is now skipped, reducing unnecessary alerts. If the issue persists after the next sync, a notification will be triggered.
Cloud zip purge automation: the Archiver will automatically purge zip files for a tenant if deleted emails exceed 50GB on a cloud appliance.
Notification search: a search field has been added to the notifications page for easier filtering.
PST import panel: now displays a full list of uploaded PST files and their sizes.
URL indexing: all URLs in newly archived emails will now be indexed (this feature is not retroactive).
Connector scheduling: weekly scheduling is now available for connector syncs.
Daily zip validation: each night, a random set of zip files are downloaded and validated to ensure storage consistency.
Dashboard enhancements: added separate counts for queued and deferred emails, along with new connector and service status cards for on-premise appliances.
Disk usage flexibility: reindex jobs with normal priority can now use the engine disk without requiring additional disk mounting.
Increased maximum export size: the maximum export size has been increased to 50GB.
Job completion notifications: admins will now receive email notifications when an import job completes successfully.
Sync and cleaning scheduling: connector sync and cleaning operations are now be scheduled separately, giving the Archiver maximum flexibility. Up to 4 cleanings can run in parallel. Connectors can start cleaning for a specific user only after the first sync completes.
SMTP test logs: logs are now displayed when an SMTP test fails.
Connector cleaning status: added a new section to the connector status page dedicated to the connector cleaning feature.

Improvements

Tenant report metrics: the “Total Compressed Size” column in tenant reports now displays values in GB.
Manticore pre-caching: improved Manticore’s automatic restart by allowing more time for the engine to pre-cache indexes.
Email index repair: the archiving process is fully suspended during index repairs and resumes automatically once completed.
Purge process efficiency: optimized purge processes for improved download and upload speeds.
Mailbox license count: when the Archiver is unable to fetch or validate users for a PEC/IMAP connector (for example for invalid credentials), the total number of users attached to the connector is considered when computing used licenses for Archiver with mailbox based licensing.
License usage calculation: improved used licenses calculation, taking into account users attached to connectors with disabled automatic folder sync and PEC/IMAP connectors unable to validate users.
Disabled IPv6: appliances are now distributed with IPv6 disabled by default.
Firewall page speed: reduced the time required to load the firewall page.
Legacy Microsoft 365 connector: removed the legacy Microsoft 365 connector. The Graph connector is now mandatory for Office 365 integrations.
Hostname update: automatically add Archiver hostname to /etc/hosts in order to prevent Outlook addin login issue for Archiver hosted privately in a LAN
Improved disk notifications: disk space alerts now consider both percentage and absolute free space values.
License overuse info: storage-based license notifications now include purgeable space details and time tracking for overuse conditions.
Postfix control post-update: if Postfix was suspended before an update due to critical disk usage or high email queues, it will remain down after the update.
Multiple connectors sync for same user: sync is allowed for the first connector only and a notification is triggered.
Deferred email cleanup: deferred emails without associated tenants are now automatically deleted after 40 retries.
Filesystem checks on reboot: filesystem consistency checks and repairs are now run automatically during reboots.
Clickable license card: the license card in the dashboard is now clickable and links to detailed license information. -Libraesva cloud volumes warnings: warnings are now hidden since those volumes are handled directly by Libraesva support team in case of any issue.
License overuse: in case of license overuse, show from how much time the Archiver is running in license overuse.
Connector sync queue: prevented overflow in the sync queue for connectors or users with long names.
Tenant page load time: reduced loading time for the tenants page on MSP appliances with a large number of tenants.
PST import safeguard: prevented PST imports when no tenant is configured.
Job ID display: the job ID is now displayed for currently executing jobs.

Bugfix

fixed connector running users list not showing elements for tenant admins
fixed LDAP validation failing when editing existing LDAP connections
fixed PST skipped emails modal automatically open when opening PST batch import job details
fixed inactive user connector notifications not honoring notification snooze settings
fixed IMAP connector showing wrong users number when removing a user from users credentials list
fixed search interface allowing to save a bad configured search with missing parameters

Breaking changes

journaling emails not sent to archiver.*@ will be automatically rejected. Please ensure you configured journaling based on docs.libraesva.com
support for OpenStack and RackSpace (which was deprecated in v24.1) has completely been removed
if you use SPF flattening on your domain, please ensure to select Microsoft or Google provider in the Archiver listener configuration

API breaking changes

APIs /api/v1/administration/sphinx_index have been moved to /api/v1/administration/manticore_index
APIs /api/v1/administration/disks have been completely refactored. Please check API documentation.
APIs /api/v1/administration/firewall/start and /api/v1/administration/firewall/stop have been removed.
APIs /api/{version}/administration/system_status/start, /api/{version}/administration/system_status/restart and /api/{version}/administration/system_status/stop have been removed.

Minor updates

v24.9.4460 released on 2025-10-06

Upgrade to v25.8: now available also for stable release tier
Email search: fixed forward and delete buttons for legacy search

v24.9.4449 released on 2025-10-01

Upgrade to v25.8: reduce time required to upgrade to version 25.8
Dashboard major update alert: introduce alert message to notify about new major version available
Email search: fixed forward and delete buttons not working correctly in legacy search

v24.9.4381 released on 2025-09-11

New v25.8: enabled upgrade to version 25.8 on early adopter channel
Notifications snooze: fixed snooze option not being applied to solve error notifications
Zip validation: solved temporary issue in validation engine after migration from v24.1

v24.9.4345 released on 2025-08-25

Appliance wizard: fixed redirection to login after completing the wizard
Azure integration: improved compatibility with Azure tools for network configuration
Download from volume: enabled PST download even when MIME type is not correctly set
Export: fixed issue preventing PST export when emails contained large inline images
Database: optimized queries and internal processes for better performance

v24.9.4325 released on 2025-08-11

Email index repair tool: improved performance for faster repair operations
IMAP connector: prevented duplicate logging of user-deleted emails already reported by EA on some servers
Folder structure: fixed issue where directory service equivalence settings were not respected
Postfix: fixed issue where service did not restart after EA suspension in certain cases
PST import popup: fixed issue where full information was not displayed
PST batch import: fixed issue preventing restart when no import had been started
Connector scheduling: fixed issue preventing automatic start on newly created connectors

v24.9.4319 released on 2025-07-23

S3 storage: exposed region setting and added flag to enable path-style URL access
IMAP/Roundcube: fixed issue with skipping synchronization of spam and draft folders
Reindex preview: added timeout handling to avoid hanging operations
Google connector: fixed issue causing excessive user fetch connections
Pre-freeze and post-thaw scripts: improved compatibility and performance
PST import job: fixed issue where configuration details were not displayed

v24.9.4305 released on 2025-07-14

Zimbra connector: fixed synchronization issues when both global Zimbra ID and local UUID are invalid
Microsoft 365 authentication: improved login performance by caching authentication results
Archiver nightly update: optimized update process and limited connector synchronization pause to necessary cases
Connector scheduling: improved efficiency by avoiding unnecessary queuing of all connector users when updating a single connector’s frequency

v24.9.4304 released on 2025-06-30

Indexing engine: improved daily optimization to better preserve disk space
SMTP journaling listeners: fixed an issue where SMTP-type listeners did not correctly recognize ownership based on configured credentials
Connector notification snooze: fixed an issue that prevented proper snoozing of connector notifications for individual users

v24.9.4301 released on 2025-06-25

Connector health system: improved periodic monitoring (every 6 hours) to detect stuck connections with mail servers and automatically terminate affected sync
Connector inactivity check: improved behavior by skipping directory services with invalid credentials, avoiding repeated notifications
SNMP: fixed OID issue preventing correct retrieval of queued email count when Postfix is down
PST import: fixed extraction issues with PST files containing Microsoft 365 calendar items
Certificate notifications: prevented multiple alerts for the same certificate issue from release v24.9.4300
Microsoft 365 configuration: fixed display issues on the configuration page under specific conditions

v24.9.4300 released on 2025-06-23

Certificate management: fixed an issue affecting certificate renewal. On-premise Archivers may receive a notification prompting certificate update
Connector sync: users previously marked as in sync are now flagged as “sync suspended” due to version update
Remote support: fixed an issue where the support channel would not open under certain conditions
Log rotation: improved log rotation mechanism to prevent excessive disk space usage
Index disk usage: improved disk monitoring and introduced automatic suspension of the indexing engine to prevent reaching 100% disk usage
SNMP: fixed OID for retrieving Archiver versions and improved overall performance for all OIDs
Tenants page: fixed false positive alerts for overused tenants

v24.9.4296 released on 2025-06-16

Tenant list: added an alert for tenants exceeding usage limits
Audit logs: added UTC timezone indication on the audit logs list page
Connector scheduling: added scheduling time specification for weekly frequency
Let’s Encrypt job logs: improved logging by displaying more detailed messages
PEC providers: fixed issue where dropped connections caused Archiver connectors to remain indefinitely pending, blocking synchronization
Dashboard filters: fixed connector count not filtered by customer for tenant admins
Export jobs: fixed an issue that prevented the restart of failed exports from the job list
SMTP test: fixed incorrect feedback display on certain hypervisors
Large attachments: fixed an issue triggered by emails with large attachments
Rsyslog: fixed issue with configuration not being correctly applied

v24.9.4276 released on 2025-05-26

Connector sync and cleaning: improved task separation for better clarity and control
SMTP journaling setup: prevented creation of duplicate credentials during configuration
SMTP configuration: password field is now hidden by default in the UI
Firewall configuration: fixed issue where firewall page showed no information after updates

v24.9.4262 released on 2025-05-20

Postfix configuration: the smtpd_banner setting is now correctly applied after updating the Archiver hostname
Directory service – user customization: inactive connector notifications are now skipped for users explicitly excluded from synchronization
Connector user sync list: the “Reset cache” button is now hidden for users not supported by connector
Journaling via authenticated SMTP: fixed issue causing messages not to be journaled correctly
Email download: fixed issue where downloaded emails in PDF format were incomplete or unavailable

v24.9.4249 released on 2025-05-05

Migration from v24.1: requires Archiver wizard completion before starting migration from v24.1
IP listeners: added support for multiple listeners on the same IP for different tenants
Advanced tenant configuration: tenant-exclusive archiver-dedicated journaling email address is now available
FTP volumes: improved validation by displaying validation errors correctly
Connector cache reset information: now displays the datetime based on the local timezone
IMAP connector: no longer clears its cache when users are added or removed
Firewall configuration: improved UI feedback when editing firewall configuration
Email restore: display loading information message when picking a folder to restore emails
Archiving rules: added details information messages when editing or adding archiving rules
Logs: enhanced logs file rotation to save disk space
LDAP form: added a warning about the maximum length of supported characters for LDAP queries
IMAP connector: gracefully handled IMAP issues when dealing with invalid IMAP resources
Audit log: hide the IMAP connectors’ password from audit logs
API: restored the authentication button on API documentation
Search: When accessing a tenant with Privacy Password set, users will immediately see the list of emails without needing to click on the “All Mailboxes” button after entering the OTP code
Tenant wizard: fixed an error in the tenant wizard during volume configuration
Import batch relaunch: fixed an issue that wasn’t creating a new job
IMAP connector: handled an invalid IMAP UID=0 scenario, avoiding an IMAP connector sync crash
LDAP users cache: fixed an issue with LDAP users caching
SMTP test: fix validation error for Archivers hosted on UpCloud
Import batch: fixed an issue with batch importing archives protected by passwords

v24.9.4185 released on 2025-04-14

Migration from v24.1: enabled support for migration when the v24.1 Archiver uses SAML authentication
Connector report jobs: improved user interface feedback by consistently displaying a progress bar during execution
Volume migration: enhanced performance when migrating to FTP target volumes
Scheduled reports: fixed an issue with filtering by customer in the selector
Volume deletion: solved a bug that prevented deletion of data volumes

v24.9.4175 released on 2025-04-07

Customer selector: enhanced usability by adding search functionality for easier customer selection
SPF resolution: ignored invalid domains during SPF checks for SPF listeners
Connector cleaning: reduced time required to perform validation before deleting messages from mailboxes
Connector clear queue button: now clears the queue for the selected customer only, if any customer is chosen
Deferred queue action buttons: added feedback after button clicks for better user interaction
Import batch folder tree: fixed an issue causing overflow in folder tree view
SAML: fixed permission issues during the setup of new SAML integrations
LDAP directory service validation: resolved validation issues for LDAPs directory service configurations
Job log compression: enhanced log compression to save disk space while maintaining readability

v24.9.4157 released on 2025-03-26

SAML: re-enabled SAML authentication support, which was temporarily unavailable in version 24.9
Graph connector: handle new Microsoft 365 responses for token expiration due to recent Graph API changes
tenant admin search: tenant admins can now access their own and delegated mailboxes without requiring OTP
customers page: enhanced the loading speed of the customers page
connector last update: fixed the last update date display for single users in the connector, now showing the last event date
failed connector sync restart: resolved an issue where auto-restart was not working in certain cases after a failed cleanup
email PDF download: fixed an issue preventing email downloads in PDF format
failed PST import restart: fixed an issue identifying PST list to reprocess

v24.9.4104 released on 2025-03-11

v24.1 migration tool: released tool for migrating from v24.1 (refer to this guide)
LDAP: validation is now allowed without configuring a user role
Journaling: improved handling of Google unverified forwarding
PEC connector: fixed an issue where the cleaning phase did not delete emails on certain mail servers
Reports: fixed a bug where report scheduling was not applied after configuring a new report
Connector user synchronization: fixed the cleaning panel not displaying completed sync
PST import: a popup now appears when attempting to start a PST import without configuring an email owner
Inactive connector notification: prevent notifications from being sent for users who are no longer active
Archived emails counter: numbers are now formatted based on the local language
PST import: fixed an issue with matching archiving policies

v24.9.4045 released on 2025-02-26

connectors section: introduced connector synchronization time tab
mailbox licensing model: introduced warning in tenants page when exceeding average mailbox storage
security bundle: enable by default for new tenant if license includes it and it’s not multi-tenant
retention rules section: introduced info message if a legal rule is active
IMAP connector: ensure credentials test when configuring connector is performed as the one performed by connector sync
VMware 8: fixed integration with backup tools
connectors queue: fixed queue visibility for tenant admins
mailbox delegation: trim spaces when using mailbox delegation in search; fixed delegation to historical users
FTP volumes: fixed integration with FileZilla by enabling ignorePassiveAddress for passive mode connection
disks section: fixed scsi information for proxmox hypervisors
deferred messages: fix email headers not visible from deferred queue

v24.9.4017 released on 2025-02-11

fixed PEC connector marking as read PEC emails for Aruba and Register mailboxes
fixed PST import not working for archives with filename including spaces
fixed tenant report generation for Archivers with more than 20TB archived emails

v24.9.4003 released on 2025-02-05

license page: better show license information and license features
tenant licensed mailbox list: show unique address list when connector is not configured
tenant report: do not consider deleted email when showing tenant emails count
export by folder: create whole directory structure instead of the single folder to export
legal hold rules: apply rules to new email every 15 minutes

v24.9.3972 released on 2025-01-28

restored support for Samba, which was temporary removed on v24.9
introduced support for AWS S3 volumes implementing object lock
automatically tag all files uploaded to volumes (supported only for Wasabi)
improved notifications section by adding customer filter and filters for all, active, unread and snoozed notifications
added button to copy OTP secret to clipboard when configuring MFA
allow custom roles with USERS_W permission to assign basic user role
ensure there’s 1 batch import job per customer maximum
fixed deferred queue not showing email details
fixed restore button showing up for Graph connectors
fixed SFTP volume validation when not inserting share
fixed job page not visible by tenant admins and tenant auditors

v24.9.3931 released on 2025-01-16

email fetch: improved performance during zip validation
PST batch import: fixed import of files containing special characters in filename
IMAP: handle mailserver error response result when fetching message headers
connector cleaning: improved feedback when cleaning fails due to mailserver failure
O365 login: do not consider 365 directory service history when picking users for login

v24.9.3918 released on 2024-12-30

connector queue: added button to empty queue
connector page list: improved by showing connector type and enabled features
IMAP connector: skip invalid IMAP messages with UUID = 0
import and batch import: allow to import .tar.gz archives
Outlook Addin: fixed automated login when username is different from principal email address
Google connector: fix cleaning procedure for email with malformed message ID
swap file: dynamically handle based on appliance size
audit log: record impersonating user when fetching, forwarding, restoring or deleting emails
audit log: allow to download logs as CVS
new volume creation: fixed active toggle on volume form
backup for cloud appliances: fixed temporary error when uploading to Libraesva Storage 2
historical users: fix alias and delegated users recording
tenant hard delete: automatically run database optimization after a tenant is deleted
indexing engine: gracefully handle indexing engine restart after a temporary issue
LDAP: fixed login for LDAP users
LDAP directory service: gracefully handle temporary issue during LDAP validation
roles: fixed custom roles migration from v24.1 to v24.9
dashboard: fix notification section not scrolling
Archiver update: reduce required time by 60%
batch import jobs: fixed webapp failing to retrieve logs
whitelabeling: fix custom logo upload
Wasabi volumes: added CA Central 1 (Toronto), EU Central 2 (Frankfurt), EU West 2 (Paris), EU West 3 (London), EU South 1 (Milan), AP Southeast 1 (Singapore) and AP Southeast 2 (Sydney) endpoints