Google Cloud Update Version 1-17-0-apigee-7

Includes Apigee X 1-17-0-apigee-7 security and stability fixes, plus Apigee API hub MCP tools support in Public Preview. It also adds updates across Google Cloud services, including Config Connector 1.150.0 and BigQuery Connector for SAP 2.14.

• Apigee infrastructure security fix addressing multiple vulnerabilities, including CVE-2026-42587, CVE-2026-5588, CVE-2026-34480, GHSA-72hv-8253-57qq, CVE-2026-33870, CVE-2026-33871, CVE-2026-35611, CVE-2026-33170, CVE-2026-33169, CVE-2026-33176, CVE-2026-33210, CVE-2026-33186, CVE-2026-42499, CVE-2026-35469, CVE-2026-32281, and CVE-2026-27144.
• Improved XML processing security to prevent external entity injection.
• Improved security in OAuthV2 policy, including prevention of unauthorized token injection and enforcement of product association for OAuthV2 flow.
• Improved security isolation for PythonScript policy execution.
• Improved security policy resolution so custom security policies apply correctly.
• Hardened message processor management ports by blocking external access to internal management endpoints.
• Improved input validation in AI protection policies to prevent Server-Side Request Forgery.
• Improved SAML assertion validation.
• Compute Engine addressed AMD firmware vulnerabilities CVE-2025-61971, CVE-2025-61972, CVE-2024-36315 affecting SEV-SNP guests.
• Compute Engine addressed CVE-2025-54518 related to potential corruption in Zen 2 microarchitecture OP cache.

• Fixed a concurrency issue to improve stability under high load.
• Fixed content-length header handling in external processing to prevent incorrect values.
• Improved performance while listing apps at scale.
• Fixed recurring fee calculation in monetization to correctly apply rate plan overrides.
• Fixed streaming response handling to prevent race conditions in bidirectional flows.
• Fixed preservation of client request IDs during proxy chaining.
• Improved IPv4 address normalization for consistent access control evaluation.
• Fixed SpikeArrest policy edge cases that previously caused 500 errors.
• Gracefully handled forward proxy connection failures to avoid retry storms, excessive CPU usage, and unnecessary scaling.
• Fixed SSE streaming detection logic.
• Improved performance and reduced redundant work in ingress status watcher.
• Fixed a permanent difference in Config Connector BigqueryTable.policyTag when using the direct controller.
• Fixed a permanent difference in Config Connector ContainerCluster.databaseEncryption.state and added support for ALL_OBJECTS_ENCRYPTION_ENABLED.
• Updated Config Connector MemorystoreInstance controller to use change cookies for better reconciliation stability and correctness.
• Improved resource creation logging with structured diffs in Config Connector.
• Added detailed diff reporting for Config Connector SQLInstance.userLabels and DataplexLake changes.

• Apigee API hub now exposes read-only APIs as Model Context Protocol (MCP) tools for agentic AI workflows in Public Preview.
• BigQuery added AI.COUNT_TOKENS in Preview to estimate token counts for text input.
• BigQuery generative AI functions can now show input, output, thought, and cache token counts by modality in Preview.
• Config Connector 1.150.0 adds new alpha resources GKEHubScope and CloudDeployTarget.
• Config Connector adds new fields for CertificateManagerCertificate, ContainerCluster, and ContainerNodePool.
• Gemini Enterprise now supports GitLab data stores in Public Preview.
• Google SecOps SIEM added relative and absolute time range selection for searches.

• Apigee X rollout began on May 12, 2026 and may take four or more business days to reach all Google Cloud zones.
• Apigee API hub MCP support is in Public Preview.
• To use Config Connector direct reconciliation, add the cnrm.cloud.google.com/reconciler: direct annotation to the resource.
• BigQuery Connector for SAP 2.14 assigns configuration tables to authorization group ZSGC; user roles must include authorization for this group.
• Cloud SQL instance upgrades to the new network architecture have been re-enabled for MySQL, PostgreSQL, and SQL Server.
• Google SecOps search time range changes roll out from May 12, 2026 to May 18, 2026.

• Apigee release notes
  https://cloud.google.com/apigee/docs/release-notes
• API hub MCP reference
  https://cloud.google.com/apigee/docs/api-hub/mcp-reference
• Config Connector release notes
  https://cloud.google.com/config-connector/docs/release-notes

Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: 1-17-0-apigee-7

Vendor release date: May 12, 2026

Published on updatealert.io: Jun 4, 2026

Description: Cloud platform for compute, data, networking, and developer services.