Hi all,

Tim found a possible remote crash in the H2 code which requires a quick
release for 1.8 and 1.9. I've already backported the patch, I'm preparing
the new releases (1.9.1 and 1.8.17) that will be issued in around one hour
(leaving some time for US to wake up). Distros were already notified so
that there will be a coordinated release of the fix.

If for any reason you can't upgrade, you'll simply have to temporarily
disable H2 in your config by removing "npn h2 alpn h2" from your bind
lines.

More info soon.
Willy

Reply via email to