> ## Documentation Index > Fetch the complete documentation index at: https://doc.lucidworks.com/llms.txt > Use this file to discover all available pages before exploring further. # Fusion 5.9.7 [localhost link]: http://localhost:3000/docs/5/fusion/release-notes/5.9.7-release-notes [mintlify link]: https://doc.lucidworks.com/docs/5/fusion/release-notes/5.9.7-release-notes [old doc.lw link]: https://doc.lucidworks.com/fusion/5.9/cpx717 Released on December 10, 2024, this [maintenance release](/docs/policies/lifecycle-policies/lw-version-support-lifecycle#maintenance-release-support-policy) includes new generative AI features and some bug fixes. To learn more, skip to the [release notes](#new-features). **Security patch available for api-gateway: Netty request smuggling vulnerabilities** A patch is available for the `api-gateway` service to address critical Netty request smuggling vulnerabilities (CVE-2026-42581, CVE-2026-42585, CVE-2026-42587). These vulnerabilities allow attackers to smuggle HTTP requests through the gateway, potentially bypassing security controls. The `api-gateway` service requires the Netty security patch. Follow these steps to apply the patched image: 1. Open your Fusion Helm values file. 2. Add or update the `api-gateway` image configuration: ```yaml theme={"dark"} api-gateway: image: repository: lucidworks name: api-gateway tag: 5.9.9-SUST-1634-patch imagePullPolicy: IfNotPresent ``` 3. Save the values file. 4. For Fusion Cloud Native deployments, run the `upgrade_fusion.sh` script you used for your current deployment. For Helm deployments, run: ```bash theme={"dark"} helm upgrade --namespace NAMESPACE RELEASE_NAME PATH_TO_VALUES ``` Replace `NAMESPACE` with your Kubernetes namespace, `RELEASE_NAME` with your Helm release name, and `PATH_TO_VALUES` with the path to your updated values file. 5. Wait for the `api-gateway` pods to restart and verify they are using the patched image. **Urgent action required by November 26, 2025** A patch is required by November 26, 2025 for all self-hosted Fusion deployments running on Amazon Elastic Kubernetes Service (EKS). Certain Java versions used by Fusion components reach end of life on this date. Failure to apply the patch will result in compatibility issues. The following Fusion services require the `cgroupv2` patch: | Service | Affected Fusion versions | Patch tag | | ---------------- | ------------------------ | ---------------------------------------------- | | `insights` | 5.9.4 to 5.9.15 | `lucidworks/insights:5.9-cgroupv2-patch` | | `spark-solr-etl` | 5.9.4 to 5.9.11 | `lucidworks/spark-solr-etl:5.9-cgroupv2-patch` | | `keytool-utils` | 5.9.4 to 5.9.10 | `lucidworks/keytool-utils:5.9-cgroupv2-patch` | Follow these steps to apply the patched images: 1. Open your Fusion Helm values file. For Fusion Cloud Native deployments, use the values file for your current deployment. For Helm deployments, use the values file you used to create the deployment. 2. For each service listed in the following table that applies to your Fusion version, add or update the image configuration: Expand the following code snippet for the complete image configuration list. ```yaml expandable theme={"dark"} global: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" sql-service: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" reverse-search: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" solr: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" zookeeper: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" kafka: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" zookeeper: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" ml-model-service: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" fusion-admin: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" fusion-indexing: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" query-pipeline: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" async-parsing: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" admin-ui: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" api-gateway: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" auth-ui: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" classic-rest-service: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" fusion-resources: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" job-config: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" insights: image: imagePullPolicy: Always name: insights repository: lucidworks tag: 5.9-cgroupv2-patch keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" job-launcher: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" job-rest-server: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" connectors: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" connector-plugin: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" connectors-backend: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" rules-ui: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" pm-ui: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" lwai-gateway: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" webapps: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" apps-manager: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" templating: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" tikaserver: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" argo: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" seldon-core-operator: keytoolUtils: image: repository: lucidworks name: "keytool-utils" tag: "5.9-cgroupv2-patch" imagePullPolicy: "IfNotPresent" argo-common-workflows: image: imagePullPolicy: Always repository: lucidworks sparkSolrEtlTag: 5.9-cgroupv2-patch utilitiesTag: 5.9.11 ``` ```yaml theme={"dark"} insights: image: name: insights pullPolicy: IfNotPresent repository: lucidworks tag: 5.9-cgroupv2-patch argo-common-workflows: image: imagePullPolicy: IfNotPresent repository: lucidworks sparkSolrEtlTag: 5.9-cgroupv2-patch ``` ```yaml theme={"dark"} insights: image: name: insights pullPolicy: IfNotPresent repository: lucidworks tag: insights:5.9-cgroupv2-patch ``` 3. Save the values file. 4. For Fusion Cloud Native deployments, run the `upgrade_fusion.sh` script you used for your current deployment. For Helm deployments, run the following command: ```bash theme={"dark"} helm upgrade --namespace NAMESPACE RELEASE_NAME PATH_TO_VALUES ``` Replace `NAMESPACE` with your Kubernetes namespace. Replace `RELEASE_NAME` with your Helm release name. Replace `PATH_TO_VALUES` with the path to your updated values file. 5. Wait for the affected service pods to restart and verify they are using the patched images. **Looking to upgrade?** See [Fusion 5 Upgrades](/docs/5/fusion/operations/fusion-5-upgrades) for detailed instructions. ## Platform Support and Component Versions ### Kubernetes platform support Lucidworks has tested and validated support for the following Kubernetes platforms and versions: * **Google Kubernetes Engine (GKE):** 1.28, 1.29, 1.30 * **Microsoft Azure Kubernetes Service (AKS):** 1.28, 1.29, 1.30 * **Amazon Elastic Kubernetes Service (EKS):** 1.28, 1.29, 1.30 Support is also offered for Rancher Kubernetes Engine (RKE) and OpenShift 4 versions that are based on Kubernetes 1.28, 1.29, 1.30. OpenStack and customized Kubernetes installations are *not* supported. For more information on Kubernetes version support, see the [Kubernetes support policy](/docs/policies/lifecycle-policies/lw-version-support-lifecycle#kubernetes-support). ### Component versions The following table details the versions of key components that may be critical to deployments and upgrades. | Component | Version | | ----------------------- | ----------------------------------------------------------------------- | | **Solr** | fusion-solr 5.9.7 *(based on Solr 9.6.1)* | | **ZooKeeper** | 3.9.1 | | **Spark** | 3.2.2 | | **Ingress Controllers** | Nginx, Ambassador (Envoy), GKE Ingress Controller Istio not supported. | **More information about support dates can be found at [Lucidworks Fusion Product Lifecycle](/docs/policies/lifecycle-policies/lw-version-support-lifecycle).** ## New Features New Lucidworks AI pipeline stages are introduced in this release to enrich your index and search with [Generative AI](/docs/lw-platform/lw-ai/lw-ai-generative-ai) predictions: * The [LWAI Prediction index stage](/docs/5/fusion/reference/config-ref/pipeline-stages/index-stages/lucidworks-ai-prediction-index-stage) allows for asynchronous and synchronous enrichment that add predictions when indexing your data.\ See **Configure the LWAI Prediction index Stage** for more detailed instructions about configuring this stage. * The [LWAI Prediction query stage](/docs/5/fusion/reference/config-ref/pipeline-stages/query-stages/lucidworks-ai-prediction-query-stage) fetches synchronous predictions to add to your query response. See [Generative AI](/docs/lw-platform/lw-ai/lw-ai-generative-ai) for more details about Lucidworks AI’s Generative AI capabilities, including pre-trained models hosted by Lucidworks. You can also use [LWAI custom trained embedding](/docs/lw-platform/lw-ai/lw-ai-custom-embedding-model-training/overview) and [LWAI hosted pre-trained models](/docs/lw-platform/lw-ai/lw-ai-pre-trained-embedding-models) with these new stages. A new API endpoint, `/index-pipelines/{id}/async-enrichment/skip-pending`, can be used to clear the queue of outstanding asynchronous prediction index requests if needed. ## Removals ### Bitnami removal Fusion 5.9.7 will be re-released with the same functionality but updated image references. In the meantime, Lucidworks will self-host the required images while we work to replace Bitnami images with internally built open-source alternatives. If you are a self-hosted Fusion customer, *you must upgrade before August 28* to ensure continued access to container images and prevent deployment issues. You can reinstall your current version of Fusion or upgrade to Fusion 5.9.14, which includes the updated Helm chart and prepares your environment for long-term compatibility. See [Prevent image pull failures due to Bitnami deprecation in Fusion 5.9.5 to 5.9.13](https://support.lucidworks.com/hc/en-us/articles/33966125467799-Prevent-image-pull-failures-due-to-Bitnami-deprecation-in-Fusion-5-9-5-to-5-9-13) for more information on how to prevent image pull failures. ## Bug fixes * Fixed an issue where some collections were not displayed in the Collections Manager if the system contained one or more orphaned child collections.\ Note that orphaned child collections are not displayed in the Collections Manager by design, but they are discoverable using the API or the Object Manager.