ReleaseBytes
gcp Google Cloud release notes ·

Apigee X Update 1-18-0-apigee-4 Improves Security and API Handling

securitygcpgaengineer
security patch announcement

Google Cloud has released an updated version of Apigee X, 1-18-0-apigee-4, which began rolling out on August 27, 2026. This release includes critical security fixes, an upgrade to JDK 17 for the Apigee runtime, and new capabilities for API product and threat protection policies. Users are affected by fixes for API product behavior and an opt-in message processor connection-failure back-off. Rollouts may take several business days to complete across all Google Cloud zones.

Security (1) ›
  • Apigee X

    Bug ID Description 544570126 Security fix for Apigee. Fixed a security issue in the PythonScript policy. N/A Security fix for Apigee infrastructure.

Fixes (1) ›
  • Apigee X

    Bug ID Description 507878328 Upgraded the Apigee runtime to run on JDK 17, while maintaining backward compatibility with JDK 11. 530965355 Added an opt-in Message Processor connection-failure back-off (CWC property HTTPClient.backoff.enabled, defaults to false) that prevents the Message Processor from consuming excessive CPU when a target is completely unavailable. 532793298 Fixed an API product bug where combining a payloadOperationGroup with a REST or llmOperationGroup rejected REST/LLM traffic with a 401. 534420582 The JSONThreatProtection policy adds a new optional child element <Reject

Notes (1) ›
  • Apigee X

    On August 27th, 2026, we released an updated version of Apigee (1-18-0-apigee-4). Note: Rollouts of this release began today and may take four or more business days to be completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_27_2026

Related releases