 source code changes.</p></a></div><h2 id=security-update>Security update</h2><ul><li><strong>ISTIO-SECURITY-2019-007</strong> A heap overflow and improper input validation have been discovered in Envoy.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18801">CVE-2019-18801</a></strong>: Fix a vulnerability affecting Envoy&rsquo;s processing of large HTTP/2 request headers. A successful exploitation of this vulnerability could lead to a denial of service, escalation of pr