2016-12-07

It was reported that the REPL server is vulnerable to the HTTP inter-protocol attack. This constitutes a remote code execution vulnerability for developers running a REPL server that listens on a loopback device or private network. Applications that do not run a REPL server, as is usually the case, are unaffected.

CVE-2016-8605
CVE-2016-8606
guile2-2.0.11p2.tgz