Jelle van der Waa has announced the following two security update for Arch Linux:
ASA-201803-12: libvorbis: multiple issuesLibvorbis and Firefox Updates for Arch Linux
ASA-201803-13: firefox: arbitrary code execution
