CVE's released, time to patch,

I think they just updated the description of the previously released CVEs. I don't see any new firmware

Likely related to the bishopfox article above. The issue also touches the older builds of 13.0, not just that specific 13.1 release Here's the article https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549

It’s old CVE 🫣 Citrix should improve visibility for “updated” articles as it’s pretty weak. 🤷🏻‍♂️

Yeah, the only thing I could catch was an updated Changelog, I thought I recognized the CVE-numbers so I scrolled down to the bottom: 2024-05-09 T 160000Z CVE-2023-6549 description updated

They just updated the old article as i have been on 13.1-51.15 for a while and the remediation for 13.1 is to upgrade to 13.1-51.15

Best part of waking up is a flood of emails from customers about re-released security messages and panic.

It got me too, almost sent out an email about it until I googled the CVE and realized it was from January.

Anyway. Now I'm on the actual version 😄