Citrix has issued its first set of patches fixing a nasty vulnerability that's been hanging over some of its biggest products.