(E)LTS report for October 2023

[Adrian Bunk <bunk@debian.org>]

LTS:

poppler:
- Confirmed that CVE-2020-18839 is a duplicate of CVE-2020-27778
- Released DLA-3620-1, fixing CVE-2020-23804 CVE-2022-37050 CVE-2022-37051
- PoCs for all 3 CVEs were confirmed to be present in the unfixed 
  version and fixed in the fixed version

krb:
- Released DLA-3626-1, fixing CVE-2023-36054.


ELTS:

zookeeper:
- Checked and marked that CVE-2023-44981 (sole unfixed CVE) does not 
  affect jessie or stretch.

haproxy:
- Checked and marked that CVE-2023-44487 (sole unfixed CVE) does not
  affect jessie or stretch.

krb:
- Released ELA-987-1 for jessie and stretch, fixing CVE-2023-36054.