Apigee X: Security patches and TLS 1.3 upgrade
Apigee X has released an updated version (1-17-0-apigee-10) containing numerous security patches for its ingress gateway and an upgrade of the default outbound TLS protocol to TLS 1.3. These changes aim to enhance security and compliance by addressing multiple CVEs and improving TLS configuration. The release includes fixes for certificate creation issues and introduces a new proxyProtocol.mode property for HAProxy compatibility. Rollout is ongoing and may take several business days to complete across all Google Cloud zones.
Security (1) ›
- Apigee X
Bug ID Description 519996459 Security fix for Apigee. Upgraded the Apigee ingress gateway to patch the following vulnerabilities: CVE-2026-27143 CVE-2019-14993 CVE-2021-39155 CVE-2021-39156 CVE-2022-23635 CVE-2026-27140 CVE-2026-27144 CVE-2026-29181 CVE-2026-32280 CVE-2026-32281 CVE-2026-32283 CVE-2026-33811 CVE-2026-33814 CVE-2026-34986 CVE-2026-35469 CVE-2026-39820 CVE-2026-39836 CVE-2026-39883 CVE-2026-4046 CVE-2026-42499 CVE-2026-42501 CVE-2026-42504 CVE-2022-31045 CVE-2026-27145 CVE-2026-32282 CVE-2026-32288 CVE-2026-32289 CVE-2026-39350 CVE-2026-39817 CVE-2026-39819 CVE-2026-39823 CVE-20
Fixes (1) ›
- Apigee X
Bug ID Description 515788622 Upgraded the default outbound TLS protocol from TLSv1.2 to TLSv1.3 on JVMs that support it. Per-proxy <SSLInfo><Protocols> settings continue to take precedence, and the new HTTPClient.outbound.tls.protocol override lets operators force a specific protocol. 184266748 Fixed an issue where ApigeeDatastore TLS certificate creation could fail in namespaces with longer names when the certificate common name exceeded the 64-byte limit. 286069772 Added a per-gateway proxyProtocol.mode property (strict, permissive, disable) on Apigee ingress gateway components t
Notes (1) ›
- Apigee X
On June 22nd, 2026, we released an updated version of Apigee (1-17-0-apigee-10). Note: Rollouts of this release began today and may take four or more business days to be completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.
https://docs.cloud.google.com/release-notes#June_22_2026