Some time ago Paulo Matias  (member of Arch Linux Brazil) started a very nice project to help improve Arch's security.
Paulo created a python script to automatically test Arch's packages against the NetBSD vulnerabilities database. The script can run automatically and generates a text file with the details of all vulnerabilities found.
This project is now called Arch-Sheriff (the source is available here ) and me and Kessia Pinheiro  began to help Paulo in the development. Arch-Sheriff now generates a html page with all vulnerabilities details and a link to them. The page can be found here:
The idea now is to create a way to notify a package maintainer about the vulnerability and add a way to mark it as fixed in Arch. We also want to create a login so the maintainers can mark all the vulnerabilities that they fixed and a rss feed.
Arch-Sheriff is still experimental and there are some things that needs to be fixed. But i think that you guys can see what we pretend and where we are going. :)
And, please, tell me what you think about this. Any suggestion is welcome.
Oh! And BTW, can someone update pacman db in gerolde? I think its a bit old (sheriff got a older version of wireshark and opera, for example).