.3.4...1.3.5><h5>SOURCE CHANGES</h5><p>Inspect the full set of source code changes.</p></a></div><h2 id=security-update>Security update</h2><ul><li><strong>ISTIO-SECURITY-2019-006</strong> A DoS vulnerability has been discovered in Envoy.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18817">CVE-2019-18817</a></strong>: An infinite loop can be triggered in Envoy if the option <code>continue_on_listener_filters_timeout</code> is set to True, which is the case in Istio. T