It was discovered that libnghttp2, a library implementing the HTTP/2
protocol, handled request cancellation incorrectly. This could result
in denial of service.

https://security-tracker.debian.org/tracker/DSA-5570-1

Read More