UnratedRed Hat & Ubuntu Linux

Apache Tika vulnerabilities

USN-8324-1 Published May 27, 2026

CVE-2025-54988CVE-2025-66516

Affected products & platforms

Red Hat & Ubuntu LinuxUnclassified

Summary

It was discovered that Apache Tika incorrectly handled XML external entities when parsing XFA content in PDF files. An attacker could possibly use this issue to obtain sensitive information or send malicious requests to internal resources or third-party servers. Affected Ubuntu releases: 22.04, 20.04. CVEs: CVE-2025-54988, CVE-2025-66516.

Affected versions

Ubuntu 22.04
Ubuntu 20.04

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Apply available updates: `sudo apt update && sudo apt upgrade` (a standard system update installs the fix).

Official advisory · medium-confidence parse· fetched 3 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.