ELTS report September 2023 ========================== 1. ELA-938-1. Issued a security update of rar fixing 1 CVE in Stretch. 2. ELA-939-1. Issued a security update of unrar-nonfree fixing 1 CVE in Stretch. 3. ELA-951-1. Issued a security update of beep fixing 1 CVE in Stretch. 4. ELA-952-1. Issued a security update of gsl fixing 1 CVE in Jessie and Stretch. 5. ELA-955-1. Issued a security update of open-vm-tools fixing 1 CVE in Stretch. 6. ELA-958-1. Issued a security update of lldpd fixing 1 CVE in Stretch. 7. ELA-959-1. Issued a security update of tomcat8 fixing 2 CVE in Jessie and Stretch. 8. ELA-960-1. Issued a security update of libapache-mod-jk fixing 1 CVE in Jessie and Stretch. 9. ELA-963-1. Issued a security update of plexus-utils2 fixing 2 CVE in Jessie and Stretch. 10. ELA-965-1. Issued a security update of tomcat7 fixing 2 CVE in Jessie and Stretch. 11. I changed CVE-2023-24998,libcommons-fileupload-java status to ignored because the new feature is disabled by default anyway and requires updated reverse-dependencies. 12. Front desk duties from 18.09.2023 to 25.09.2023 13. I have been working on a security update for jetty9 in Stretch. The work is almost complete and the release should happen at the start of October.