Jelle van der Waa has announced the following security updates for Arch Linux:
ASA-201804-7: zsh: denial of serviceZSH, Roundcube, and xfig Updates for Arch Linux
ASA-201804-8: roundcubemail: arbitrary command execution
ASA-201804-9: xfig: information disclosure
