The following two security advisories has been publish for Arch Linux:
ASA-201802-6: exim: arbitrary code executionExim / MPV Security Updates for Arch Linux
ASA-201802-7: mpv: arbitrary code execution