This message was deleted.

Looks like it might only be on old 13 and 12 versions The following supported versions of Citrix ADC and Citrix Gateway are affected by this vulnerability: • Citrix ADC and Citrix Gateway 13.0 before 13.0-58.32 • Citrix ADC and Citrix Gateway 12.1 before 12.1-65.25 • Citrix ADC 12.1-FIPS before 12.1-55.291 • Citrix ADC 12.1-NDcPP before 12.1-55.291

I'll be testing today, we're on 12.1 65.21 for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516

Version 12.1-65.25 has been released today so you would always have to update this, for 13.0 you should have updated to 13.0-88.12+ already due to the last vulnerability. From the Citrix blogpost: "Customers who are using an affected build with a SAML SP or IdP configuration are urged to install the recommended builds immediately as this vulnerability has been identified as critical"

No new build. Basically reinforcing that this one has some stuff going on in the wild so just another reason to get up to those patched builds recently released

yeah, i JUST got all mine up to 12.1-65.21. lol

Nov 8 according to my ADM

13.1 seems to be safe based on Citrix Security Bulletin 😳

grrr only just updated to 12.1-65.21

yea, looks like 12.1 only one with that new build for it. I don't have as many on 12.1 anymore being end of maintenance a ways back. but yea, that stinks. ugg

gladly we've already gotten most of our customer envs to 13.0 which has been recently patched due to the previous CVE

The latest 13.0 build still has issues with HDX Insight/HA failover though right?

we got an early notification in Finland that this will be released soon (~10h's ago), but they didn't go public with it until this afternoon (GMT+2)

We just upgraded a production HA-pair to 12.1-65-25, the upgrade went standard according to the Citrix docs. Everything is still working afterwards, but our config is pretty basic

Updated my DR site 1st stage of 2 stage via ADM to 12.1 65.25, smoke testing now, nothing jumping out at me

no issues here with the couple of 12.1-65.25 envs

Well, I guess being behind the times and not using SAML for once has a silver lining....

Is it all a big scheme to get us to use Native OTP right on the NetS^H^H^H Gateway Service in Citrix Cloud @Neal Dolson?

Sometimes it pays off to be a late adopter, Neal! =D