v1.18.2
📦 qdrantView on GitHub →
🐛 9 fixes🔧 5 symbols
Summary
This release focuses on stability and security, addressing several bugs related to optimization, snapshot transfers, and authentication bypasses. Key improvements include logging slow operations during shard WAL recovery.
🐛 Bug Fixes
- Fixed potential infinite loop in optimizer when using multi vectors with `prevent_unoptimized`.
- Cleaned up unfinished segment optimizations on cancellation; they are no longer loaded on restart.
- Fixed MatchAny query with an empty list being rejected on integer index.
- Added timeout to shard snapshot streaming endpoint and dropped connections not actively read from.
- Fixed abort transfer with resharding not being idempotent.
- Fixed reporting old progress in new snapshot transfers.
- Fixed WAL lock error occurring on Android platforms.
- Fixed REST auth whitelist bypass on specially crafted paths by resolving the route before authorizing.
- Fixed out of bound heap read vulnerability with malicious snapshots by rejecting incorrect length.