Libraesva EA v25.12: Release Notes – LibraCyber - Centre d’assistance

Main features

This release delivers one of the most substantial architectural upgrades in the product’s history. We have re-engineered core subsystems to push the platform far beyond previous performance ceilings, with a particular focus on indexing, ingestion throughput, and large-scale storage workflows. The result is a faster, smarter, and more resilient Archiver, capable of sustaining heavy workloads with ease while preparing the foundation for future innovations.

New indexing engine

We introduced a redesigned version of our indexing engine that elevates speed, reliability, and operational consistency across the board.

The new engine processes data with reduced latency, supports much faster ingestion rates, and executes queries with higher efficiency—even under sustained load.

Through continuous internal optimizations, smarter memory utilization, and robust failure-resilience strategies, the indexing layer now delivers:

faster indexing of new items
more responsive and stable query execution -improved behavior under peak concurrency
better scaling on large datasets
lower operational overhead and smoother long-term performance

This is not just an incremental improvement: It’s a foundational leap that enhances nearly every part of the platform relying on search and retrieval.

Fully parallel email ingestion

Until version 25.8, each tenant could process only one email at a time. Even though ingestion was fast, this single-threaded model could still become a bottleneck, especially during first-time imports or heavy bursts of incoming messages.

We have now overhauled this architecture from the ground up. The Archiver can ingest multiple emails simultaneously for the same tenant, unlocking substantial performance gains in real-world workloads.

Key improvements:

true multi-email parallel ingestion per tenant
dynamic workload adaptation: the Archiver intelligently detects load and automatically tunes its parallelism to maximize resource usage
massive improvements in first-time ingestion speed
better CPU and I/O distribution across the system
smoother ingestion under sustained or unpredictable spikes

This redesign eliminates the previous serialization point and transforms ingestion throughput into a scalable, high-performance pipeline.

Async volumes and high-speed caching-write Layer

Email archiving involves periodic packaging: every N ingested emails are bundled into an encrypted ZIP file and uploaded to all active data volumes.

In high-ingestion scenarios—especially when uploads are slow, this upload phase could become the limiting factor, forcing the Archiver to wait for storage operations to complete before continuing.

To remove this bottleneck, we introduced a new advanced storage architecture featuring caching-write volumes and async upload volumes.

How it works:

Immediate local write Encrypted packages are first written at high speed to a local caching volume, allowing ingestion to continue without interruption.
Background asynchronous upload Archiver then handles the distribution of these packages to all active data volumes asynchronously, in the background, without slowing down ingestion.
Automatic cleanup Once uploads are successfully completed, files are automatically removed from the caching-write volume.

Benefits:

upload latency no longer impacts ingestion speed
dramatically smoother ingestion during heavy workloads
optimized use of fast local storage
more predictable throughput, even with slow or remote storage backends
clear separation between ingestion performance and storage performance

This advanced volume configuration completely eliminates waiting time tied to remote uploads and enables the Archiver to maintain consistently high throughput.

Note: this feature requires appropriate licensing.

Features

jobs: allow naming jobs to simplify tracking and speed up identification across import, export, and reindex workflows
jobs page: added pagination, search by job name, and filtering by job type to improve navigation in large job histories
running job modal: increased its size for better readability, remove the info icon, and allow opening job details by clicking anywhere on the job tile
new job handling: ensure that newly launched jobs instantly appear as the first entry in the running-job popup for immediate visibility
job progress percentage: always display two decimal digits to provide clearer insight into the progress of large operations
volume sections: significantly improved page loading speed, add pagination, enable searching by volume name, and introduce filters by storage type and usage
volume types: introduced a new dedicated Ionos volume type to support environments using Ionos storage
reindex metrics: show ZIP download speed, estimated time to download, projected completion date, and extended performance insights
reindex recovery: allow relaunching failed reindex jobs so that only failed ZIP files are reprocessed
pst batch import: added a comprehensive panel showing total extracted emails, ingestion rates per hour, imported GB per hour, total archive size, imported size, remaining size, and average email size; include estimated completion date, categorized archive lists (running, pending, completed, failed), and a search panel for locating specific archive files
pst import: show imported emails per hour and estimated completion date directly within the job view
export speedup: accelerate exports when emails are stored on local volumes by better leveraging local disk performance
export metrics: show exported emails per hour, total exported size, average email size, and estimated completion date in the job panel
volume migration metrics: display total archive size to migrate, migration rate per hour, migrated size, and GB-per-hour throughput
disk email notification: include disk capacity details in alerts, showing used GB and percentage utilization
email ingestion page: introduced a new page with historical growth charts for archived emails and storage usage, plus a chart showing recent ingestion rates
folder structure maintenance: added an automatic scheduled service that keeps mailbox folder structure data clean for faster user navigation
let’s encrypt: auto-fill the email field with the Libraesva default address when enabling Let’s Encrypt on cloud appliances
connector error handling: implemented a new system for detecting, parsing, and presenting known errors such as rate limiting
connector severity tuning: reduced notification severity for temporary conditions like Microsoft 365 rate-limiting
dns check: introduced a nightly DNS health check to ensure the appliance is resolving correctly
storage usage report: added a new report tracking storage consumption per tenant over time
legal hold coverage report: added a report showing how many emails are currently protected by each legal hold rule
dynamic sizing for database and webserver: introduced automatic resource scaling for both components so that configuration adjusts seamlessly whenever appliance resources are modified
IMAP and PEC connector validation: refined validation checks to deliver clearer, more actionable feedback when connection issues occur
volumes validation: updated validation logic to provide more meaningful diagnostics and clearer guidance in case of volume-related problems
purgeable space update: automatically refresh the displayed purgeable space when a purge job completes, avoiding outdated cached values and ensuring the customer page always reflects accurate data, with periodic updates during the purge process when possible
search filters: added quick-access filters to easily search emails from today, yesterday, or recent days
local user aliases: allow creating aliases that point to users managed through the directory service
job dependencies: added a clear UI status indicating when a job is waiting for another job to complete, with graceful fallbacks using started at and created at timestamps
NTP configuration: introduced a dedicated page to configure and validate time synchronization settings
delete protections: added UI errors when attempting to delete emails newer than the latest legal-hold application run
job termination safety: added a confirmation step before allowing a job to be force-killed
cluster notifications: added automatic email notification when the cluster setup completes
volume migration insights: added metrics showing remaining archives, remaining size, and both source and destination volume names
reboot detection: detect jobs interrupted by a reboot and mark them as failed with a dedicated message
notifications: made hostnames in email notifications clickable for faster access to the appliance

Security

local user password: increased security by enforcing a minimum password complexity requirement
legal hold protection: show a clear warning when attempting to delete emails newer than the most recent legal-hold application job

Improvements

report email field: improved the input field for entering email addresses so it takes advantage of all available space
audit log: always display human-readable descriptions instead of raw action entries to make event interpretation clearer
kill jobs: avoid sending email notifications when jobs are manually terminated from the UI
login through 365: replaced the Graph API icon with the official Microsoft 365 logo for clearer visual alignment
snmp section: updated the UI layout to make it easier to understand how to add new SNMP settings
pst batch import: enhanced validation for unsupported file extensions and provide a clear, specific error message
disk threshold notifications: reviewed all thresholds, email notification content, and dashboard colors to ensure more consistent and accurate alerting
external 365 address: automatically exclude external Microsoft 365 addresses from license counting and connector queues to avoid unnecessary processing
license user count: improved background jobs to increase the accuracy, speed, and resilience of license-usage calculations
indexing engine: improved cleanup of email content before indexing to prevent unnecessary token indexing and maximize indexing engine performance
job metadata: clarified the distinction between created at and started at across the job system
hypervisor console menu: refined the interface for better usability
export diagnostics: increased logging verbosity to simplify troubleshooting during export operations
PST import: increased the maximum number of PST files processed concurrently within a batch job to better utilize all available resources
jobs page performance: switched to asynchronous data loading so the page renders faster, loading job details only upon details panel expansion
M365 external mailboxes: automatically skip EXT mailboxes when queuing users for the connector
cluster setup: enhanced the setup flow by guiding users through required firewall settings and validating them proactively
cluster UI: improved the interface to more clearly present local and remote nodes information
cluster disk guidance: clarified explanations around cluster-disk usage and detailed the correct configuration procedure
cluster data model: highlighted that local disk contents are not replicated across nodes and that the passive node’s credentials will be overwritten during cluster setup
indexing engine: updated the indexing engine page to also display customers without any stored emails
attachment indexing: improved performance when parsing and indexing Office documents
version visibility: enhanced the version page to reliably surface newly available minor updates, ensuring clearer upgrade awareness

Bugfix

purge job UI: fixed a crash that appeared when launching a new purge job from the interface
purge job stability: fixed a condition where the Archiver could become unresponsive when starting a purge job
export: fixed an issue that occurred when exporting an excessively large number of files from a single archive

Breaking changes

legacy search removal: remove the legacy search feature, originally deprecated in v23.6

Update notice

folder-structure volumes: these volumes are no longer required, as folder-tree management is now fully handled internally by the Archiver. Existing folder-structure volumes are no longer used and can be safely removed manually. In the Libraesva Cloud environment, this cleanup will be performed automatically in the days following the update.

How to update

In Settings > System > General section, you can either update the Archiver immediately or schedule the update for the upcoming night.

Minor updates

v25.12.5550 released on 2026-05-19

Custom roles: fixed an issue preventing users with custom roles from assigning other custom roles
Security: resolved CVE-2026-46333

v25.12.5519 released on 2026-05-11

Connector cleaning: improved logging when email deletion is skipped due to Archiver validation checks, ensuring that messages are removed from the mailbox only after successful archiving
Export jobs: improved overall performance through enhanced memory management and more efficient folder structure computation
Export jobs: fixed an issue causing all emails to be incorrectly included in infected email archives when antivirus scanning was enabled during export
API documentation: improved documentation for connectors POST API actions
Dashboard storage chart: fixed an issue where the last day value was missing from the storage usage chart
Notifications: fixed a race condition preventing the “90% usage of your Libraesva Email Archiver license” notification email from being sent
Security: resolved CVE-2026-31431, CVE-2026-43284 and CVE-2026-43500

v25.12.5400 released on 2026-04-14

Import batch jobs: improved error notification emails by limiting the error description length when multiple failures occur, preventing oversized messages and enhancing readability
Log volumes: resolved an issue during log file uploads that prevented newly generated log files from being correctly transferred
Email view: fixed a rendering issue when displaying emails with missing header address values, ensuring consistent visualization even with incomplete metadata

v25.12.5323 released on 2026-03-30

Disks notification emails: enhanced notification content by adding a direct link to the online documentation, improving clarity and reducing friction in issue interpretation
Customer last archived emails: optimized timestamp computation for the most recent archived email per tenant, significantly reducing processing time and improving overall system efficiency
Archiving rules: resolved an issue where wildcard patterns were not correctly honored during email address matching, ensuring rules now apply consistently across all supported formats

v25.12.5265 released on 2026-03-23

Retention rules applier: significantly improved delete handler performance for large-scale operations (>100,000 emails), ensuring consistently high throughput without degradation during execution
Listeners: refined last activity tracking to update timestamps only when an email is archived, avoiding updates for emails discarded by archiving rules
Connector folder sync: improved mailbox folder synchronization to prevent merging folders with identical names originating from PST imports when located at different hierarchy levels
M365 delegation: improved mailbox delegation engine by using case-sensitive email addresses; Archiver now enforces case-sensitive handling in alignment with M365 behavior
Tenants page: resolved an issue where connectors linked to LDAP configurations were not displayed in the connectors list modal
Disks page: resolved a malfunction occurring with certain cloud providers that do not expose SCSI disk information

v25.12.5234 released on 2026-03-16

Full index disk notification: improved the computation of indexing engine chunks size by excluding temporary files, resulting in more accurate disk usage reporting
Volume deletion: fixed an issue where the UI incorrectly displayed a warning that a volume could not be deleted, even when all files had already been successfully stored on other volumes

v25.12.5169 released on 2026-03-10

Google integration: improved handling of edge cases in listeners, enhancing detection and archiving of messages originating from unverified forwarding sources
Indexing engine: optimized indexing processes to reduce overall disk space consumption
IMAP connector validation: increased connection timeout to 30 seconds to improve compatibility with slow or high-latency mail servers
Backup volumes: added support in Libraesva Cloud for customer-defined backup volumes and rule-based backup configurations
API documentation: improved and clarified documentation for email export–related API endpoints
Privacy Officer UI: improved timer rendering to provide smoother and more consistent countdown updates
Privacy Officer: corrected email notifications to display the actual remaining OTP validity time instead of a fixed 15-minute value
Privacy Officer: resolved issue causing empty reports at the end of the Privacy OTP workflow

v25.12.5147 released on 2026-02-23

Migration from v24.1: increased log verbosity to facilitate identification of issues related to low network connectivity during upgrades
IMAP connector: improved detection and reporting of synchronization failures caused by invalid on-disk IMAP mailbox structures
Nightly disk cleaner: enhanced the scheduled cleanup task to remove legacy folder-structure metadata files more reliably
Connector scheduler: resolved a race condition that could cause the scheduler to repeatedly attempt to start the same connector synchronization when a dedicated unit was stuck
Connector sync: improved recovery logic to ensure a new synchronization can start correctly even if a previous run terminated abnormally and left inconsistent state data
Disks page: corrected SCSI controller mapping for additional disks attached to virtual machines to ensure accurate representation in the UI

v25.12.5112 released on 2026-02-18

IMAP connector: improved error notifications during synchronization by providing more detailed diagnostic information
Nightly disk cleaner: enhanced the cron task to perform deeper cleanup of metadata related to deleted messages
Disks page: improved SCSI identifier mapping on Proxmox hypervisors to ensure accurate disk correlation
Azure first boot: improved initial network configuration by relying more consistently on the Azure agent to ensure correct interface setup
Cluster status page: extended the view to display the full set of available cluster status information
Cluster switchover: introduced a cluster health check that runs before initiating a switchover to prevent operations in degraded states
Storage dashboard charts: corrected the computation of uncompressed storage values when archived items are associated with invalid email addresses
Backup volumes page: removed the backup counter column, as the value is always zero and does not provide meaningful information
Disk expansion scripts: refined the available disk list by excluding references to detached disks
Volume credentials check: fixed false-positive notifications caused by temporary connection issues
API documentation: expanded the API documentation with additional details, clarifications, and usage examples to improve integration and developer guidance

v25.12.5069 released on 2026-02-10

Integrity check: introduced a nightly validation task that verifies archive ZIP alignment across storage volumes and generates a notification if inconsistencies are detected
Cluster dashboard: improved service cards to clearly indicate services intentionally disabled on the passive node
Export jobs: jobs are now automatically marked as failed when connectivity issues with the export volume occur
Report jobs: jobs are marked as errored if a failure occurs during email delivery
Tenants page: added an alert in the tenant mailbox list when license count falls back to unique email addresses due to missing connector configuration
Cloud appliances: implemented automatic cleanup of legacy folder-structure volumes and related files. These volumes have been deprecated since v25.12 and are no longer used
Scheduled reports: improved error logging when generating reports for all tenants
Index integrity mismatch: resolved a race condition that could cause a deadlock when the Archiver attempted automatic remediation
Upgrade from v25.8: fixed a race condition that could temporarily slow down the archiving process immediately after upgrading to v25.12
Export downloads: resolved timeout issues affecting the download of large exported files
Microsoft 365 delegation: fixed an issue preventing correct application of the “Managed by” configuration
User profile configuration: resolved an issue where the alias edit action was not functioning correctly
PST batch import: fixed an issue where accessing logs for pending files could cause the UI panel to crash
Email search within folders: fixed a regression that caused recent emails not to appear in mailbox folders

v25.12.5009 released on 2026-02-02

Migration from v24.1: introduced a hypervisor console upgrade tool enabling direct upgrade from v24.1 to v25.12, skipping intermediate versions (v24.9 and v25.8)
PST batch import jobs: successful jobs with partial archive errors are now highlighted in yellow for better visibility
PST batch import: improved logging with a dedicated log file generated for each imported PST
PST import decompression: added detection and parsing of OOM-killer events, with detailed diagnostics displayed in the UI
Outlook add-in: users can now authenticate even when directory service authentication is disabled globally but enabled for specific accounts
Export jobs: fixed upload-phase failures occurring with multiple concurrent ZIP-based export jobs
Email index repair tool: enhanced hypervisor console tool to automatically run fixes only for affected customers
XML attachment indexing: improved XML parsing performance and reduced indexing time for large attachments
IMAP connector: added validation and notification when linked IMAP credentials no longer exist
IMAP connector: improved failure notifications by including the specific IMAP error returned by the server
Deferred emails page: clarified retry policy, including retry frequency and maximum attempts for journaling email imports
Connector queue clear tool: now displays customer information when clearing queues for a specific tenant
Database cleanup: optimized daily automatic cleanup to maintain higher long-term database performance

v25.12.4983 released on 2026-01-26

Attachment indexing: limited PDF text extraction to the first 50 pages to improve indexing performance
Indexing engine: improved handling of integrity mismatches under high email archiving load, allowing archiving to continue while automatic recovery is attempted
Audit logs: improved action descriptions for better clarity and traceability
Disk cleanup: enhanced nightly cleanup to reclaim additional disk space
PST import: improved job performance when importing folder structures

v25.12.4981 released on 2026-01-22

PST batch import: increased the maximum number of concurrent jobs on large appliances
Audit logs: masked sensitive data such as secrets and passwords in audit logs
Email view: fixed UI overflow issues when viewing EML email attachments
Email restore: fixed an issue where the restore modal did not correctly display the mailbox folder list in some cases
Retention rules: fixed an out-of-memory issue occurring when retention rules were forcibly applied from the hypervisor console

v25.12.4972 released on 2026-01-19

Timezone settings: added a new UI page to change the system timezone directly from the web interface
Attachment indexing: improved performance when indexing large attachments
Tenants page: optimized caching to reduce page load times
Volumes page: optimized caching to improve page load performance
Report generation: enhanced progress feedback to provide more details without impacting job execution time
Cached emails: increased disk space dedicated to email caching to speed up average email retrieval in the web UI
Purge process: optimized disk usage by immediately removing temporary files created during purge operations on ZIP archives
Saved searches: increased maximum query length from 255 to 1024 characters
Saved search validation: added clear error feedback and field highlighting when queries exceed the maximum allowed length
API documentation: improved and clarified descriptions for all API endpoints
Export jobs: enhanced error messages when exports fail due to upload issues on export volumes
Custom certificates: added more detailed log messages when certificate uploads fail
Connector sync: automatically restore the connection to the indexing engine after timeouts caused by slow IMAP servers
Rsyslog configuration: fixed issues when applying configurations migrated from v24.1
Index mismatch notification: improved messaging to explain automatic recovery attempts and eventual notification removal
Cloud appliance backups: restricted admin editing of backup rules and volumes; cloud volume backups are now configuration-only
Per-user reports: unified equivalent users from different directory services to avoid duplicate entries
PST batch import: fixed import failures caused by large HTML attachments

v25.12.4926 released on 2026-01-13

Microsoft Outlook add-in: improve authentication to persist user sessions and reduce repeated login prompts by remembering the authenticated user
PST batch import jobs: added tracking of already imported emails, not imported twice to prevent duplicate processing
Async volume upload: improve throughput by parallelizing file uploads to better support appliances with high email ingestion rates
Customer hard delete: extended the deletion process to include attachment indexing metadata, freeing additional disk space
Purge jobs: updated purge operations to also remove attachment indexing metadata, reducing disk space usage
Jobs page performance: improved page load times when batch import jobs contain thousands of files
PST import validation: added a dedicated error message when attempting to import corrupted PST files
Jobs UI: improved readability by formatting large numbers with thousands separators
Volume migration jobs: enhanced estimation logic to provide more accurate job completion date predictions
Volumes page: updated the UI to display all volume types, including log and backup volumes
Batch import disk space handling: improved user feedback when jobs are terminated due to insufficient available disk space
Firewall configuration page: enabled automatic page refresh after configuration updates are successfully applied
Tenants page performance: reduced loading time when retrieving and displaying tenant information
PST batch import logging: optimized log buffering to reduce disk I/O and improve performance when importing thousands of archives
Cluster synchronization: optimized the cluster sync process to reduce synchronization time
Cluster setup wizard: improved the guided setup experience by adding contextual hints during configuration
License usage reports: fixed generation issues affecting scheduled reports
Jobs page stability: resolved a crash caused by excessively large data fields leading to maximum execution time errors
ZIP validation: fixed an issue where the ZIP validation directory was not created correctly
API documentation: fix the login endpoint mock and improve parameter value descriptions

v25.12.4881 released on 2026-01-07

Graph, Google, and IMAP connectors: enhanced logging to clearly indicate why a user is not supported
Connector folder structure synchronization: improved UI feedback to highlight that folder names containing emojis are not supported
Connector scheduling: increased the maximum number of concurrent connector synchronizations to better utilize resources on large appliances
Graph connector: improved warning messages when a mailbox has exceeded its Microsoft storage quota
Zimbra connector: improved error reporting when the Zimbra account does not exist on the target server
Attachment indexing: introduced automatic scheduled index optimization for the attachment indexing index
S3-like volumes: improved error handling to simplify troubleshooting in problematic scenarios
PST batch import: increased the frequency of checks for launching new download or archive extraction processes to maximize ingestion speed
PST batch import: when relaunching failed PSTs, avoids reprocessing PST files that contain no emails
Hypervisor console: improved feedback when the HA cluster is not included in the license
Disk usage checker: prevented job termination in scenarios involving high index disk usage
Pending jobs: improved UI messaging to clarify that pending jobs start only after currently running and queued jobs have completed
Email restore: improved the restore panel to clarify that user impersonation is required to display available folders for the target mailbox
Volumes page: fixed an issue with filters when changed multiple times
Volumes page: now also displays log volumes and backup volumes
Legal hold rules report: fixed reporting issues when multiple legal holds protect the same emails
Web server: server version is now hidden to improve security
CSP security: improved production bundle configuration to comply with Content Security Policy requirements

v25.12.4839 released on 2025-12-29

PEC connector validation: added support for PEC mailboxes provided by Intesa
Appliance services: improved dynamic sizing and resource computation to better utilize large appliances
IMAP connector: reviewed connection parameters to improve security
Attachment indexing: improved performance of PDF attachment indexing
Jobs list page: batch import jobs completed with warnings are now displayed in yellow
Single-file import jobs: fixed missing counter for errored emails
Batch import jobs: increased supported file parallelism to better utilize resources on large appliances
Batch import jobs: improved logging to clearly report download and archive decompression time and throughput
Import and batch import jobs: optimized RAM usage during archive decompression and increased the maximum number of concurrent decompressions
Index mismatch notification: fixed an issue that prevented email notifications from being sent in some cases
Trusted timestamp: improved performance when applying trusted timestamp validation during email archiving finalization
IMAP connector validation: fixed an issue that caused connector validation to fail even when user credential validation succeeded

v25.12.4829 released on 2025-12-22

Batch import job: improved logs by clearly showing which process is generating each log entry
Batch import job: increased the maximum number of concurrent archive decompression processes to better utilize system resources
Attachment indexing: added a cache layer to speed up indexing of the same attachment across multiple emails
Attachment indexing: fixed an issue when parsing PDF files larger than 50 MB
Email ingestion: improved performance when running single PST import jobs
Index disk usage notifications: increased the threshold before sending warning emails to avoid premature alerts
Running jobs panel: automatically adjusts the refresh frequency to avoid web server flooding when running large jobs
Cluster page: improved UI with clearer instructions to open firewall ports before starting cluster setup
Cluster status: improved cluster status visibility (enabled state, last sync, and peer node hostname)
Cluster page: added visibility when cluster synchronization is currently running
Cluster setup: automatically runs SSH connectivity checks and provides clear feedback in case of issues
Cluster setup completion: sends an email notification when the initial cluster setup completes
Cluster error: added email notifications in case of errors during cluster synchronization
Cluster sync: UI is now always available on the passive node, even while cluster sync is running, and provides real-time feedback
Cluster sync: checks proper disk sizing on the remote node before starting cluster synchronization
Cluster certificates: fixed an issue on the passive node that could cause Let’s Encrypt certificate renewal failures

v25.12.4784 released on 2025-12-15

Migration job: added failed-archives counter and guidance on how to proceed when a job fails
Cluster: improved setup procedure by displaying logs during cluster initialization
Database configuration sizing: improved automatic sizing to better utilize available RAM
Microsoft 365 configuration: fixed Managed by and Managing lists not displaying correctly when values contain uppercase letters