A new Debian Linux update has been published: ELA-984-1 nghttp2 security update
A nghttp2 security update has been released for Debian GNU/Linux 9 Extended LTS to address a flaw in the HTTP2 protocol.Read more @ Linux Compatible