Hi all, Tim found a possible remote crash in the H2 code which requires a quick release for 1.8 and 1.9. I've already backported the patch, I'm preparing the new releases (1.9.1 and 1.8.17) that will be issued in around one hour (leaving some time for US to wake up). Distros were already notified so that there will be a coordinated release of the fix.
If for any reason you can't upgrade, you'll simply have to temporarily disable H2 in your config by removing "npn h2 alpn h2" from your bind lines. More info soon. Willy