We released an updated version of the Apigee hybrid software, v1.15.10

## Announcement Announcement ### v1.15.10 On November 3, 2026 we released an updated version of the Apigee hybrid software, v1.15.10. * For information about upgrading, see[Upgrading Apigee hybrid to v1.15.10](https://cloud.google.com/apigee/docs/hybrid/v1.15/upgrade). * For information about new installations, see[The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.15/big-picture). **Note:** This is a patch release. The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch by using the Helm chart automatically updates the images. You don't typically need to make manual image changes. For information about container image support in Apigee hybrid releases, see[Apigee release process](https://cloud.google.com/apigee/docs/release/apigee-release-process#apigee-hybrid-container-images). ## Fix Fixed #### Fixed in this release | Bug ID | Description | | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **578314600** | **Fixed an issue where apigee-connect-agent ignored HTTPS\_PROXY and failed to establish a tether in clusters that require an HTTP forward proxy for egress; the agent now uses HTTP/2 keepalive pings on the control-plane connection while honoring HTTPS\_PROXY (including proxy credentials).** | | **576707253** | **Removed the compromised emSign roots and the cross-signing Comodo AAA Services root from the system and Java (cacerts) trust stores across containers.** | ## Security Security | Bug ID | Description | | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **N/A** | **Security fixes for apigee-asm-ingress.** This addresses the following vulnerabilities: [CVE-2026-116585](https://nvd.nist.gov/vuln/detail/CVE-2026-116585) [CVE-2026-116586](https://nvd.nist.gov/vuln/detail/CVE-2026-116586) [CVE-2026-63209](https://nvd.nist.gov/vuln/detail/CVE-2026-63209) | | **N/A** | **Security fixes for apigee-asm-istiod.** This addresses the following vulnerabilities: [CVE-2026-116585](https://nvd.nist.gov/vuln/detail/CVE-2026-116585) [CVE-2026-116586](https://nvd.nist.gov/vuln/detail/CVE-2026-116586) [CVE-2026-40179](https://nvd.nist.gov/vuln/detail/CVE-2026-40179) [CVE-2026-42151](https://nvd.nist.gov/vuln/detail/CVE-2026-42151) [CVE-2026-42154](https://nvd.nist.gov/vuln/detail/CVE-2026-42154) [CVE-2026-44903](https://nvd.nist.gov/vuln/detail/CVE-2026-44903) [CVE-2026-63209](https://nvd.nist.gov/vuln/detail/CVE-2026-63209) | | **N/A** | **Security fixes for apigee-envoy.** This addresses the following vulnerabilities: [CVE-2026-5450](https://nvd.nist.gov/vuln/detail/CVE-2026-5450) [CVE-2026-5928](https://nvd.nist.gov/vuln/detail/CVE-2026-5928) | | **N/A** | **Security fixes for apigee-fluent-bit.** This addresses the following vulnerabilities: [CVE-2026-111497](https://nvd.nist.gov/vuln/detail/CVE-2026-111497) [CVE-2026-8286](https://nvd.nist.gov/vuln/detail/CVE-2026-8286) [CVE-2026-8924](https://nvd.nist.gov/vuln/detail/CVE-2026-8924) [CVE-2026-8927](https://nvd.nist.gov/vuln/detail/CVE-2026-8927) [CVE-2026-92392](https://nvd.nist.gov/vuln/detail/CVE-2026-92392) | | **N/A** | **Security fixes for apigee-hybrid-cassandra.** This addresses the following vulnerabilities: [CVE-2026-56857](https://nvd.nist.gov/vuln/detail/CVE-2026-56857) [CVE-2026-56866](https://nvd.nist.gov/vuln/detail/CVE-2026-56866) [CVE-2026-78659](https://nvd.nist.gov/vuln/detail/CVE-2026-78659) [CVE-2026-78660](https://nvd.nist.gov/vuln/detail/CVE-2026-78660) [CVE-2026-78663](https://nvd.nist.gov/vuln/detail/CVE-2026-78663) [CVE-2026-78667](https://nvd.nist.gov/vuln/detail/CVE-2026-78667) [CVE-2026-78669](https://nvd.nist.gov/vuln/detail/CVE-2026-78669) [CVE-2026-94439](https://nvd.nist.gov/vuln/detail/CVE-2026-94439) [CVE-2026-94440](https://nvd.nist.gov/vuln/detail/CVE-2026-94440) [CVE-2026-94444](https://nvd.nist.gov/vuln/detail/CVE-2026-94444) [CVE-2026-94447](https://nvd.nist.gov/vuln/detail/CVE-2026-94447) [CVE-2026-94448](https://nvd.nist.gov/vuln/detail/CVE-2026-94448) [CVE-2026-97030](https://nvd.nist.gov/vuln/detail/CVE-2026-97030) [CVE-2026-97031](https://nvd.nist.gov/vuln/detail/CVE-2026-97031) [CVE-2026-97032](https://nvd.nist.gov/vuln/detail/CVE-2026-97032) | | **N/A** | **Security fixes for apigee-kube-rbac-proxy.** This addresses the following vulnerabilities: [CVE-2026-56857](https://nvd.nist.gov/vuln/detail/CVE-2026-56857) [CVE-2026-56866](https://nvd.nist.gov/vuln/detail/CVE-2026-56866) [CVE-2026-78659](https://nvd.nist.gov/vuln/detail/CVE-2026-78659) [CVE-2026-78660](https://nvd.nist.gov/vuln/detail/CVE-2026-78660) [CVE-2026-78663](https://nvd.nist.gov/vuln/detail/CVE-2026-78663) [CVE-2026-78667](https://nvd.nist.gov/vuln/detail/CVE-2026-78667) [CVE-2026-78669](https://nvd.nist.gov/vuln/detail/CVE-2026-78669) [CVE-2026-94439](https://nvd.nist.gov/vuln/detail/CVE-2026-94439) [CVE-2026-94440](https://nvd.nist.gov/vuln/detail/CVE-2026-94440) [CVE-2026-94444](https://nvd.nist.gov/vuln/detail/CVE-2026-94444) [CVE-2026-94447](https://nvd.nist.gov/vuln/detail/CVE-2026-94447) [CVE-2026-94448](https://nvd.nist.gov/vuln/detail/CVE-2026-94448) [CVE-2026-97030](https://nvd.nist.gov/vuln/detail/CVE-2026-97030) [CVE-2026-97031](https://nvd.nist.gov/vuln/detail/CVE-2026-97031) [CVE-2026-97032](https://nvd.nist.gov/vuln/detail/CVE-2026-97032) | | **N/A** | **Security fixes for apigee-operators.** This addresses the following vulnerability: [CVE-2026-63209](https://nvd.nist.gov/vuln/detail/CVE-2026-63209) | | **N/A** | **Security fixes for apigee-prom-prometheus.** This addresses the following vulnerabilities: [CVE-2026-56857](https://nvd.nist.gov/vuln/detail/CVE-2026-56857) [CVE-2026-56866](https://nvd.nist.gov/vuln/detail/CVE-2026-56866) [CVE-2026-78659](https://nvd.nist.gov/vuln/detail/CVE-2026-78659) [CVE-2026-78660](https://nvd.nist.gov/vuln/detail/CVE-2026-78660) [CVE-2026-78663](https://nvd.nist.gov/vuln/detail/CVE-2026-78663) [CVE-2026-78667](https://nvd.nist.gov/vuln/detail/CVE-2026-78667) [CVE-2026-78669](https://nvd.nist.gov/vuln/detail/CVE-2026-78669) [CVE-2026-81870](https://nvd.nist.gov/vuln/detail/CVE-2026-81870) [CVE-2026-94439](https://nvd.nist.gov/vuln/detail/CVE-2026-94439) [CVE-2026-94440](https://nvd.nist.gov/vuln/detail/CVE-2026-94440) [CVE-2026-94444](https://nvd.nist.gov/vuln/detail/CVE-2026-94444) [CVE-2026-94447](https://nvd.nist.gov/vuln/detail/CVE-2026-94447) [CVE-2026-94448](https://nvd.nist.gov/vuln/detail/CVE-2026-94448) [CVE-2026-97030](https://nvd.nist.gov/vuln/detail/CVE-2026-97030) [CVE-2026-97031](https://nvd.nist.gov/vuln/detail/CVE-2026-97031) [CVE-2026-97032](https://nvd.nist.gov/vuln/detail/CVE-2026-97032) | | **N/A** | **Security fixes for apigee-udca.** This addresses the following vulnerabilities: [CVE-2026-116585](https://nvd.nist.gov/vuln/detail/CVE-2026-116585) [CVE-2026-116586](https://nvd.nist.gov/vuln/detail/CVE-2026-116586) [CVE-2026-116587](https://nvd.nist.gov/vuln/detail/CVE-2026-116587) | | **N/A** | **Security fixes for apigee-watcher.** This addresses the following vulnerability: [CVE-2026-63209](https://nvd.nist.gov/vuln/detail/CVE-2026-63209) |