guile2 -- multiple vulnerabilities

Ludovic Courtès reports:

The REPL server is vulnerable to
the HTTP inter-protocol attack
The ‘mkdir’ procedure of GNU Guile, an implementation of
the Scheme programming language, temporarily changed the process’ umask
to zero. During that time window, in a multithreaded application, other
threads could end up creating files with insecure permissions.