CVE-2019-19781 – AWS Marketplace customer notification

Greetings from AWS Marketplace,

Citrix has announced that a number of their products have a security issue they classify as critical. This issue is known as CVE-2019-19781 and it impacts the products you are subscribed to, which are listed below. We are writing to inform you that version 13.0-47.24 addresses CVE-2019-19781 and is available on AWS Marketplace. For additional information on this CVE and the patch, please refer to the Citrix Security Bulletin located at: https://support.citrix.com/article/CTX267027.

[Link to Affected Products]

It is necessary to upgrade all of your instances running the software to build 13.0-47.24. To determine which AWS EC2 instances you are running the affected Citrix software on and to upgrade, follow these instructions:

1. Go to AWS Marketplace (https://aws.amazon.com/marketplace) and log into your AWS Marketplace Account
2. In the top right drop down under "Hello, {username}" select "Your Marketplace Software"
3. On the "Manage Subscriptions" page under "Your subscriptions" type "Citrix" into the search box to pull up all Citrix products you are subscribed to
4. Select the "Manage" button on the subscription you want to update
5. On the "Manage Subscriptions" page, select the "Actions" dropdown and then "Instances" > "View Instances"
6. In the "View instances" display window you'll see region, instance ID, and status for all instances your Citrix subscription is running
7. Log into each of your running instances and upgrade the software on each of your running instances by following Citrix’s instructions: https://docs.citrix.com/en-us/citrix-adc/13/upgrade-downgrade-citrix-adc-appliance/upgrade-standalone-appliance.html
8. Citrix has provided a verification tool to confirm the running version is patched https://support.citrix.com/article/CTX269180

If you have any additional questions about this latest version or need assistance with updating, please contact Citrix directly at:
https://citrix.com/support/open-a-support-case.html.
Need to contact AWS Marketplace for support?
https://console.aws.amazon.com/support/cases#/create?issueType=customer-service&serviceCode=amazon-marketplace

Thank you,
--The AWS Marketplace Team https://aws.amazon.com/marketplace