CVE-2025-54409 Impact On API Gateway 11.1

Products

• CA API Gateway

Issue/Introduction

Is the API Gateway 11.1 release impacted by CVE-2025-54409 ?

Environment

CA API Gateway 11.1

Resolution

The aide package which is impacted by CVE-2025-54409 is addressed on the debian bookworm release which gateway 11.1 runs on with the aide_0.18.3-1+deb12u4_amd64.deb binary.  This updated binary is included in the August 2025 MPP for gateway 11.1 .  Applying the August 2025 MPP or later will address this vulnerability.