> ## Documentation Index
> Fetch the complete documentation index at: https://doc.lucidworks.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Lucidworks Search 5.9.9
[localhost link]: http://localhost:3000/docs/lucidworks-search/13-release-notes/5.9.9-release-notes
[mintlify link]: https://doc.lucidworks.com/docs/lucidworks-search/13-release-notes/5.9.9-release-notes
[old doc.lw link]: https://doc.lucidworks.com/managed-fusion/5.9/c28ch8
Released on January 29, 2025, this [maintenance release](/docs/policies/lifecycle-policies/lw-version-support-lifecycle#maintenance-release-support-policy) delivers essential security enhancements, including the latest updates for Kafka and key improvements for future-ready protection, plus bug fixes.
**Security patch for api-gateway**
Lucidworks will apply a security patch to your Lucidworks Search instance to address critical Netty request smuggling vulnerabilities (CVE-2026-42581, CVE-2026-42585, CVE-2026-42587) in the `api-gateway` service.
No action is required on your part.
## Key highlights
### Enhanced Security and Future-Ready Safeguards
With the Lucidworks Search 5.9.9 release, we’ve upgraded Kafka to version 3.7.0, incorporating the latest security updates to strengthen your platform’s resilience. Additionally, we’ve implemented critical updates for Lucidworks Search’s Webapps, Templating, and API Gateway services, ensuring robust protection for your data.
Looking ahead, we’ve introduced enhancements to streamline and expedite the delivery of future security updates, providing you with a safer Lucidworks Search environment.
### Secure deployments with immutable root file system
Fusion now supports a read-only root file system to safeguard against unauthorized modifications, protecting your deployment against malicious software and other attacks.
Most services operate efficiently in this mode, and for components that need write access, a separate writable mount is available.
Read-only mode is enabled by default for some Lucidworks Search services.
See [Read-only root file system](/docs/lucidworks-search/08-administration/security) for a list of services that support it or have it enabled by default.
It should only be enabled for services that do not require CRUD access.
Contact Lucidworks to customize how read-only root file system access is configured for your Lucidworks Search deployment.
## Bug fixes
* This release improves compatibility between Solr and Lucidworks Search’s [LWAI Prediction index pipeline stage](/docs/5/fusion/reference/config-ref/pipeline-stages/index-stages/lucidworks-ai-prediction-index-stage) to prevent errors about incompatible characters in field names.
* The Lucidworks Search API realm can now authenticate when an API key is passed via an `apiKey` parameter.\
Previously, the key could only be passed in the header, as in these examples:
```bash wrap theme={"dark"}
curl -H "x-api-key: API_KEY" "https://EXAMPLE_COMPANY.b.lucidworks.cloud/api/query/status"
curl -H "apiKey: API_KEY" "https://EXAMPLE_COMPANY.b.lucidworks.cloud/api/query/status"
```
Now you can also pass the key as a parameter, like this:
```bash wrap theme={"dark"}
curl https://EXAMPLE_COMPANY.b.lucidworks.cloud/api/query/status?apiKey=API_KEY
```
* The [Configurations](/api-reference/configurations/get-configurations-service-status) and [ZooKeeper Import/Export](/api-reference/zookeeper/get-zookeeper-data) APIs are now accessible only to authorized users from within Lucidworks Search.
## Known issues
* Saving large pipelines during high traffic may trigger service instability.\
In some environments, saving large query pipelines while handling high traffic loads can cause the Query service to crash with OOM errors due to thread contention.
Lucidworks Search 5.9.14 resolves this issue.
If you're impacted and not yet on this version, contact Lucidworks Support for mitigation options.
## Deprecations
For full details on deprecations, see [Deprecations and Removals](/docs/lucidworks-search/deprecations-and-removals).
As part of our ongoing initiative to replace our V1 (Classic) connectors with our more secure, flexible, and scalable V2 (Plugin) connectors, the following V1 connectors are deprecated in this release:
* [Windows Share SMB 2/3 V1](/docs/fusion-connectors/connectors/v1/windows-share-smb-2-3)
* [File Upload V1](/docs/fusion-connectors/connectors/v1/fileupload)
Learn more about [V1 and V2 connectors](/docs/fusion-connectors/concepts/v1-v2-connectors).
**FAQ**
How long will Lucidworks continue to support these connectors?
These connectors will remain available for at least 6 months from the release of Lucidworks Search 5.9.9 and will be removed in a release after this 6-month period.
To prepare for the eventual removal of these connectors in a future release, Lucidworks strongly recommends beginning the migration of your datasources to the following V2 connectors:
* [Windows Share SMB 2/3 V2](/docs/fusion-connectors/connectors/windows-share-smb-2-3-v2)
* [File Upload V2](/docs/fusion-connectors/connectors/fileupload-v2)
## Removals
For more information, see [Deprecations and Removals](/docs/lucidworks-search/deprecations-and-removals).
### Bitnami removal
By August 28, 2025, Fusion's Helm chart will reference internally built open-source images instead of Bitnami images due to changes in how they host images.
## Platform Support and Component Versions
### Kubernetes platform support
Lucidworks has tested and validated support for the following Kubernetes platform and versions:
* **Google Kubernetes Engine (GKE):** 1.28, 1.29, 1.30
For more information on Kubernetes version support, see the [Kubernetes support policy](/docs/policies/lifecycle-policies/lw-version-support-lifecycle#kubernetes-support).
### Component versions
The following table details the versions of key components that may be critical to deployments and upgrades.
| Component | Version |
| ----------------------- | ----------------------------------------------------------------------- |
| **Solr** | fusion-solr 5.9.9 *(based on Solr 9.6.1)* |
| **ZooKeeper** | 3.9.1 |
| **Spark** | 3.2.2 |
| **Ingress Controllers** | Nginx, Ambassador (Envoy), GKE Ingress Controller Istio not supported. |
**More information about support dates can be found at [Lucidworks Fusion Product Lifecycle](/docs/policies/lifecycle-policies/lw-version-support-lifecycle).**