 CHANGES</h5><p>Inspect the full set of source code changes.</p></a></div><h2 id=security-update>Security update</h2><ul><li><strong>ISTIO-SECURITY-2020-006</strong> Excessive CPU usage when processing HTTP/2 SETTINGS frames with too many parameters, potentially leading to a denial of service.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080">CVE-2020-11080</a></strong>: By sending a specially crafted packet, an attacker could cause the CPU to spike at 100%. This co