A new attack technique affects HTTP/2 configurations of major web servers, but some have released patches already.