CVE-2025-38352 on API Gateway

Products

• CA API Gateway

Issue/Introduction

Is API Gateway affected by CVE-2025-38352?

Environment

API Gateway 11.0 and 11.1

Resolution

The fix for the Linux package that is affected by this CVE-2025-38352 is available in Debian 12 (bookwarm) release. The upgraded Linux package is available in August 2025 monthly platform package (MPP) for gateway 11.1.

The Debian 11 (bullseye) release for gateway 11.0 is still affected and there is no fix available as per this CVE tracking.