Processing commands for cont...@bugs.debian.org:
> forcemerge 995175 1009786
Bug #995175 {Done: Andrew Ruthven <and...@etc.gen.nz>} [src:request-tracker4]
request-tracker4: CVE-2021-38562
Bug #1009786 [src:request-tracker4] request-tracker4: CVE-2021-38562 username
enumeration via timing side-channel attack
Severity set to 'serious' from 'important'
Marked Bug as done
Marked as fixed in versions request-tracker4/4.4.3-2+deb10u1,
request-tracker4/4.4.4+dfsg-3, and request-tracker4/4.4.4+dfsg-2+deb11u1.
Marked as found in versions request-tracker4/4.4.4+dfsg-2 and
request-tracker4/4.4.3-2.
Added tag(s) fixed-upstream.
Bug #995175 {Done: Andrew Ruthven <and...@etc.gen.nz>} [src:request-tracker4]
request-tracker4: CVE-2021-38562
Marked as fixed in versions request-tracker4/4.4.5+dfsg-1.
Merged 995175 1009786
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
1009786: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009786
995175: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995175
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
