Mentioned in the evidence
- Cloud Profiler Java agent
- ListCaseEvents API
- ListCaseEvidenceData API
- Google Distributed Cloud (software only) for VMware
- Container-Optimized OS container hosts
Official sources
- Google Cloud changelog (changelog) ↗
Upgrade the Java agent to cloud-profiler-java-agent_20261026_RC00 (GitHub release v0.5.0) or later, and then rebuild and redeploy your applications.
- Google Cloud changelog (changelog) ↗
If you can't immediately upgrade or rebuild, update your host or container operating system's CA certificate store as described in GCP-2026-071, and then set the GRPC_DEFAULT_SSL_ROOTS_FILE_PATH environment variable to point to the updated PEM bundle.
- Google Cloud changelog (changelog) ↗
Effective November 2, 2026, the ListCaseEvents API endpoint is deprecated. You should use the ListCaseEvidenceData API endpoint instead.
- Google Cloud changelog (changelog) ↗
Upgraded the container host to the latest Container-Optimized OS LTS release, rebasing onto the newest operating system, Go, and containerd security fixes.
- Google Cloud changelog (changelog) ↗
The Cloud Profiler Java agent is updated with a new Certification Authority (CA) certificate bundle, in response to security bulletin GCP-2026-071. Google Cloud infrastructure and the Cloud Profiler backend service are not affected.
This is a global change, verified against Google Cloud’s own sources. It is not an assessment of your systems or your impact.