h2o: ABI-breaking patch for CVE-2023-44487