Advisory: Apache Parquet Vulnerability (CVE-2025-30065)

Zurück zur Übersicht der Sicherheitshinweise
Informational
CVE(s)
CVE-2025-30065
Updated:
Produkt(e)
Sophos Central
Veröffentlichungs-ID sophos-sa-20250406-apache-parquet
Artikelversion 1
Erstveröffentlichung
Provisorische Lösung No

Overview

On 1 April 2025, a security vulnerability in Apache Parquet was disclosed, it was responsibility reported by Amazon researcher named Keyi Lei. On 16 March 2025, Apache released version 1.15.1 of Parquet containing a fix for the critical severity vulnerability.

Are Sophos products are affected?

The following products have been reviewed against the Apache Parquet vulnerability:

Product or ServiceStatusDescription
TaegisUnder Investigation 
Cloud OptixUnder Investigation 
SG UTM (all versions)Not affectedComponent not present
Sophos CentralUnder Investigation 
Sophos Endpoint Protection (Windows)Not affectedComponent not present
Sophos Endpoint Protection (macOS)Not affectedComponent not present
Sophos Endpoint Protection (Linux)Not affectedComponent not present
Sophos EmailNot affectedComponent not present
Sophos Firewall (all versions)Not affectedComponent not present
SophosConnect ClientNot affectedComponent not present
Sophos Home (Windows)Not affectedComponent not present
Sophos Home (MacOS)Not affectedComponent not present
SophosLabs IntelixUnder Investigation 
Sophos MobileNot affectedComponent not present
Sophos Mobile EAS ProxyNot affectedComponent not present
Sophos Mobile Control app (iOS + Android)Not affectedComponent not present
Sophos Intercept X for Mobile app (iOS + Android)Not affectedComponent not present
Sophos Secure Email app (iOS + Android)Not affectedComponent not present
Sophos Secure Workspace app (iOS + Android)Not affectedComponent not present
Sophos Chrome SecurityNot affectedComponent not present
Sophos PhishThreatUnder Investigation 
Sophos REDNot affectedComponent not present
Sophos AP/APX (SFOS Managed)Not affectedComponent not present
Sophos AP/APX (Central Managed)Not affectedComponent not present
Sophos WirelessNot affectedComponent not present
Sophos DNS ProtectionNot affectedComponent not present
SUSINot affectedComponent not present
AV Engine (all platforms)Not affectedComponent not present

Related Information