Quickwit 0.9.2 is a security patch release.
Security
- Restrict Kafka client params that execute commands or load libraries (GHSA-g85h-2988-4cv8).
- Reject oversized columnar dictionaries during merges (Tantivy GHSA-7pph-m7rw-cqhv).
Users running Quickwit versions 0.4.0 through 0.9.1 should upgrade to 0.9.2.
Kafka sources that use Kerberos (sasl.mechanisms: GSSAPI) no longer run kinit automatically. If you relied on automatic ticket renewal, set the QW_KAFKA_KINIT_CMD environment variable or renew tickets outside Quickwit.