diff --git a/guile1.8/trunk/PKGBUILD b/guile1.8/trunk/PKGBUILD
index 510a6c92e..ff42347b8 100644
--- a/guile1.8/trunk/PKGBUILD
+++ b/guile1.8/trunk/PKGBUILD
@@ -2,17 +2,22 @@
 
 pkgname=guile1.8
 pkgver=1.8.8
-pkgrel=8
+pkgrel=9
 pkgdesc='Portable, embeddable Scheme implementation written in C. Legacy branch.'
 url="https://www.gnu.org/software/guile/"
 arch=('x86_64')
 license=('GPL')
 depends=('gmp' 'libltdl' 'ncurses>=5.7' 'texinfo')
-source=(https://ftp.gnu.org/pub/gnu/guile/guile-$pkgver.tar.gz)
-md5sums=('18661a8fdfef13e2fcb7651720aa53f3')
+source=(https://ftp.gnu.org/pub/gnu/guile/guile-$pkgver.tar.gz
+        https://src.fedoraproject.org/rpms/compat-guile18/raw/rawhide/f/guile-1.8.8-cve-2016-8605.patch)
+sha256sums=('c3471fed2e72e5b04ad133bbaaf16369e8360283679bcf19800bc1b381024050'
+            '6433d2e1436d0b756df0d397fdafa8438c7d59cf993787091a93ed2aaf47d4f1')
 
 build() {
   cd guile-$pkgver
+
+  patch -Np1 -i ../guile-1.8.8-cve-2016-8605.patch
+
   export CFLAGS+=" -O1"
   ./configure --prefix=/usr \
 	--disable-static  \