Security updates for Thursday

Arch Linux has updated lib32-glibc (multiple vulnerabilities).

Debian has updated libreoffice (two code execution flaws).

Fedora has updated hamster-time-tracker (F23: two denial of service flaws).

Mageia has updated cacti (authentication bypass), claws-mail (two vulnerabilities), cpio (code execution), eog (code execution from 2013), eom (code execution from 2013), gambas3 (code execution from 2013), gnome-photos (code execution from 2013), graphite2/firefox (multiple vulnerabilities), gtk+2.0 (code execution from 2013), libgcrypt (key leak), libxmp (multiple vulnerabilities), nginx (three vulnerabilities), pinpoint (code execution from 2013), python-pillow (two code execution flaws), thunar (code execution from 2013), and thunderbird (multiple vulnerabilities).

Ubuntu has updated nss (15.10, 14.04, 12.04: cryptographic weakness).