Citrix tells everyone not to worry too much about its latest security patches. NSA's former top hacker disagrees

Citrix has issued patches for 11 CVE-listed security vulnerabilities in its various networking products. The bundle includes fixes for one code injection bug, three information disclosure flaws, three elevation of privilege bugs, two cross-site scripting vulnerabilities, one denial-of-service hole, and one authorization-bypass …

[Richard 12]

"No untrustworthy traffic"

There's no such network.

[Anonymous Coward]

Re: "No untrustworthy traffic"

That's not true.

For a small fee, me and my trusty wire cutters will secure any network you show me.

For a small fee of course.

[Charlie Clark]

Re: "No untrustworthy traffic"

Including the wireless ones? ;-)

[WolfFan]

Re: "No untrustworthy traffic"

The wire clippers will cut antennas off...

[Anonymous Coward]

Re: "No untrustworthy traffic"

You forgot the epoxy to disable all the ports.

[Anonymous Coward]

Low bar

"none of the bugs are as serious, or as easily exploited, as the infamous CVE-2019-19781 "Shitrix" vulnerability in December."

That seems like a low bar that I don't find particularly reassuring. Sort of like saying that the coronavirus isn't as serious as the bubonic plague.