Starstruk Logo MarkStarstruk

v1.18.2

mastra-ai/mastrav1.18.2Jun 4, 2026by timvisee

AI Summary

Qdrant vector database patch release addressing bugs in optimizer, WAL recovery, and snapshot transfers, alongside security fixes for REST auth and heap access.

Key Highlights

  • Fixes for optimizer infinite loops with multi-vectors
  • Fixes for shard snapshot streaming and transfer
  • Security fixes for REST auth bypass and out-of-bounds heap read
  • Log slow operations during shard WAL recovery
  • Clear cache of ID tracker after building a segment

New Features

  • Log slow operations during shard WAL recovery
  • Clear cache of ID tracker after building a segment
  • Don't rebuild payload index if changing `on_disk` flag
  • Timeout to shard snapshot streaming endpoint

Full Release Notes

# Change log

## Improvements

* https://github.com/qdrant/qdrant/pull/9282 - Log slow operations during shard WAL recovery
* https://github.com/qdrant/qdrant/pull/9137 - Clear cache of ID tracker after building a segment
* https://github.com/qdrant/qdrant/pull/9138 - Don't rebuild payload index if changing `on_disk` flag

## Bug Fixes

* https://github.com/qdrant/qdrant/pull/9285 - Fix potential infinite loop in optimizer when using multi vectors with `prevent_unoptimized`
* https://github.com/qdrant/qdrant/pull/9217 - Clean up unfinished segment optimizations on cancellation, don't load them on restart
* https://github.com/qdrant/qdrant/pull/9260 - Fix MatchAny with an empty list being rejected on integer index
* https://github.com/qdrant/qdrant/pull/9239 - Add timeout to shard snapshot streaming endpoint, drop connections not actively read from
* https://github.com/qdrant/qdrant/pull/9215 - Fix abort transfer with resharding not being idempotent
* https://github.com/qdrant/qdrant/pull/9237 - Fix reporting old progress in new snapshot transfers
* https://github.com/qdrant/qdrant/pull/9226 - Fix WAL lock error on Android platforms

## Security

* https://github.com/qdrant/qdrant/pull/9254 - Fix REST auth whitelist bypass on specially crafted paths, resolve route before authorizing
* https://github.com/qdrant/qdrant/pull/9268 - Fix out of bound heap read with malicious snapshot by rejecting incorrect length