Security Advisories (4)
CVE-2026-61484 (2026-08-05)

Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61483 (2026-08-05)

Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61485 (2026-08-05)

Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61486 (2026-08-05)

Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NAME

Lucy::Store::LockFactory - Create Locks.

SYNOPSIS

use Sys::Hostname qw( hostname );
my $hostname = hostname() or die "Can't get unique hostname";
my $folder = Lucy::Store::FSFolder->new( 
    path => '/path/to/index', 
);
my $lock_factory = Lucy::Store::LockFactory->new(
    folder => $folder,
    host   => $hostname,
);
my $write_lock = $lock_factory->make_lock(
    name     => 'write',
    timeout  => 5000,
    interval => 100,
);

DESCRIPTION

LockFactory is used to spin off interprocess mutex locks used by various index reading and writing components. The default implementation uses lockfiles, but LockFactory subclasses which are implemented using alternatives such as flock() are possible.

CONSTRUCTORS

new

my $lock_factory = Lucy::Store::LockFactory->new(
    folder => $folder,      # required
    host   => $hostname,    # required
);

Create a new LockFactory.

  • folder - A Folder.

  • host - An identifier which should be unique per-machine.

METHODS

make_lock

my $lock = $lock_factory->make_lock(
    name     => $name,      # required
    timeout  => $timeout,   # default: 0
    interval => $interval,  # default: 100
);

Return a Lock object, which, once obtain() returns successfully, maintains an exclusive lock on a resource.

  • name - A file-system-friendly id which identifies the resource to be locked.

  • timeout - Time in milliseconds to keep retrying before abandoning the attempt to obtain() a lock.

  • interval - Time in milliseconds between retries.

make_shared_lock

my $lock = $lock_factory->make_shared_lock(
    name     => $name,      # required
    timeout  => $timeout,   # default: 0
    interval => $interval,  # default: 100
);

Return a Lock object for which shared() returns true, and which maintains a non-exclusive lock on a resource once obtain() returns success.

  • name - A file-system-friendly id which identifies the resource to be locked.

  • timeout - Time in milliseconds to keep retrying before abandoning the attempt to obtain() a lock.

  • interval - Time in milliseconds between retries.

INHERITANCE

Lucy::Store::LockFactory isa Clownfish::Obj.