A new Debian Linux update has been published: DLA 3057-1: request-tracker4 security update
A request-tracker4 security update has been released for Debian GNU/Linux 9 LTS to address an issue where sensitive information could have been revealed by way of a timing attack on the authentication system.Read more @ Linux Compatible