This message was deleted.
# citrix-netscaler
s
This message was deleted.
🙌 2
n
Currently restricted, would you be able to snag a screenshot, please?
j
Also restricted for me, I think it will be released in minutes
g
I was just about to write the same thing 😉
n
Ah, thank you, appreciate it. =D
m
I would definelty grab the firmware now before the us folks wake up...
✅ 1
g
This! 😅
m
maybe somebody can prepare a onedrive for our us-friends!? 🙂
j
Hahaha
I'll see what I can do if messages pop up
downloads for 13.1 and 14.1 are live and working
m
Seems the link is life now
n
Download for 13.0 seems iffy so far, extra annoying when I have but one single pair left on that version.. 😛
g
E-Mail arrived just now
n
Beat me by a few seconds! =D Thanks for the screenshot.
s
NP! Doesn't seem too bad
c
I managed to grab last time the firmware by using a VPN and connected to Australia 😄
g
And it's gone 😄
💯 1
s
Not gonna urgently patch a DOS and authenticated RCE on management interface
n
I'm not a fan of them bunching these two together in this sentence, as it's not clear exactly which one they're observing, but more than likely the RCE. "Exploits of these CVEs on unmitigated appliances have been observed."
s
You should have your management interfaces on a secure network anyways
n
100% agreed.
k
the cdn went down again... got the 13.1 build downloaded
n
Same, I'll get 13.0 later.. at some point. 😄
k
I'll download it via ADM
like the last time
the downloads page fails every time if you're not fast enough
s
can you maybe share the 13.1 ;-)
k
just a sec
❤️ 1
don't have the checksums or anything though
g
A big Thank you @Julian Jakob for the fast information ;)
a
Citrix download website seems to be down with 504 🤷🏻‍♂️ Is it only for me ? 🤔
n
Down for everyone I'd say, the usual effect.. if only they learned from it.
a
So… NS seems to not so good to load balance such traffic? It seems to be nice advertising 😖
k
it is, but it has this DDoS problem they just found! 😄
😆 1
😂 6
a
What is the problem with using a 3rd party service to offer downloads with proper scalability?
🧵 1
k
this is ridiculous, the same exact thing happened the last time a critical patch was released
💯 5
s
download worked for me now
k
got both 13.0 and 13.1 now
m
I am currently uploading 13.1 and 14.1 to OneDrive, when finished Ill share the links.
k
I shared the 13.1 link privately on request
m
valid point with that "privately" 😄
k
I think CSG should handle the delivery, but as they fail to do so it's great to have buddies here! 🙂
n
I get 404's even trying to sign into my account
💯 1
🥱 1
VPN'd to a Mumbai India server and it worked lol
j
🙌 7
❤️ 3
just trying to get the 13.0 right now
k
I can drop you the links too Jan
I think ppl trust you, so you can deliver it forward
j
just DM'd you
c
I need Firmware 13.0 and 13.1. Any Links 🙂 ?
a
Why did we get hacked? Because vendors want to be able to handle traffic to share installation files... nice 🤣 It's not funny at all 🤷🏻‍♂️ This time it's "only" a DoS, but next time you never know 😉.
🤣 2
n
@Christian Jöns The link shared above by Jan about 25 minutes ago has both, if you haven't been able to get them from Citrix.
❤️ 1
c
Thanks Markus and Jan 🙂
j
Thanks guys!
j
For people who need the XVA files, they are also online. Still chasing the 13.0 XVA though
s
I was able to download the new build AFTER attempting to authenticate but then going directly to the download page
Normally I go to mycitrix, authenticate, and then go to downloads using the navigation on the page.
a
Don’t miss security bulletins for StoreFront & Session Recording 😉
j
the ole Citrix trifecta
3️⃣ 2
r
Thank you for the links @Jan Tytgat
✅ 1
m
Maybe wait another couple of hours until all CVEs are released...
😂 2
r
tale as old as time...
CVE comes out, Citrix site crashes...
Anyone have the MD5s ?
not that I don't trust downloads.corelayer.eu.... but... 🙂
😇 1
m
Just a little summary... Because lot of people already posted Jan's website I assumed its ok to include the links in the summary!? 14.1 12.35 Download: https://downloads.corelayer.eu/netscaler/build-14.1-12.35_nc_64.tgz (Thanks Jan Tytgat!) Filename: build-14.1-12.35_nc_64.tgz Description: Firmware Checksum: SHA-256 - 60a6c895438bcbf2bb0834a065ed783acd00acc71f561819ae1cd7a05fd27cda 13.1 51.15 Download: https://downloads.corelayer.eu/netscaler/build-13.1-51.15_nc_64.tgz (Thanks Jan Tytgat!) Filename: build-13.1-51.15_nc_64.tgz Description: Firmware Checksum: SHA-256 - 71e84ddcf7be2bf467883c64bf41a5059d730a1be8cf198391bfb0638f4f0198 13.0 92.21 Download: https://downloads.corelayer.eu/netscaler/build-13.0-92.21_nc_64.tgz (Thanks Jan Tytgat!) Filename: build-13.0-92.21_nc_64.tgz Description: Firmware Checksum: SHA-256 - 07add15d0da4f14e8cee7da88db1a02de18c90ccd36f94c560ecb7a5153b0cc2 (Thanks Neal Dolson!)
❤️ 8
r
13.0? 🙂
n
HA-256 - 07add15d0da4f14e8cee7da88db1a02de18c90ccd36f94c560ecb7a5153b0cc2 for the firmware .tgz
❤️ 2
k
😄
👍 1
😅 3
r
Greetings.. I don't recall ever having deployed Session Recording in my many years with our small CVAD environment. Is Session Recording a default option that I could have overlooked upon installation? We certainly don't have a Session Recording server. Could someone tell me an easy way to check if we're running it?
r
I do not believe SR is default. IIRC, it requires another server, and agent on the VDAs.
👍 1
m
Nope. Session recording is a own bit of software.
n
Yeah, if you don't know if you have it or not.. you more than likely don't. =D
r
w00t! Well, that's one of the three vulnerabilities I don't have to mess with. Thank you all. :)
💯 1
👍 2
g
Somehow, my firmware update is stuck at "Installing SaaS Template app catalog files" anybody have the same issue? 13.1-51.15
r
gui or cli?
g
gui right now, i wanted to check if it was a known issue before trying cli. cli works fine 🙃
b
Had the same issue. Switched to CLI and worked without any issue.
👍 1
r
I had the same issue as well with the update hanging (even though the update seems to complete successfully if I wait a half hour at the "SaaS Template" part and then reboot). I've also seen this behavior previously; not just with this update.
👍 1
g
Thanks for sharing. There is a brief prompt in the lower part of the browser with a faulting http statement and that seems to break or stop the gui progress.
c
Gui sucks should always use CLI or ADM to do firmware updates.
💯 4
👆 3
o
Completed for one customer tonight , no issues: 13.1.49.15 to 13.1.51.15 As I was doing the work around 10 pm EST, no download issues with the Euro folks DOS'ing the CDN for us folks in NA 😉😜
👍 2