# Bro 2.6.4 release (security update)
**URL:** https://community.zeek.org/t/bro-2-6-4-release-security-update/5821
**Category:** Zeek
**Created:** [August 29, 2019, 12:16am UTC](https://community.zeek.org/t/bro-2-6-4-release-security-update/5821 "2019-08-29T00:16:14Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Jon\_Siwek](https://community.zeek.org/u/Jon_Siwek)
#### Post date: [August 29, 2019, 12:16am UTC](https://community.zeek.org/t/bro-2-6-4-release-security-update/5821/1 "2019-08-29T00:16:14Z")
A security patch release, Bro v2.6.4, is now available for
download:
[https://www.zeek.org/downloads/bro-2.6.4.tar.gz](https://www.zeek.org/downloads/bro-2.6.4.tar.gz)
[https://www.zeek.org/downloads/bro-2.6.4.tar.gz.asc](https://www.zeek.org/downloads/bro-2.6.4.tar.gz.asc)
Bro v2.6.4 addresses a potential Denial of Service
vulnerability:
\* The NTLM analyzer did not properly handle AV Pair sequences
that were either empty or unterminated, resulting in invalid
memory access or heap buffer over-read. The NTLM analyzer
is enabled by default and used in the analysis of SMB,
DCE/RPC, and GSSAPI protocols.
Thanks to Chris Hinshaw for reporting the issue.
---
### Author:  [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/bro-2-6-4-release-security-update/5821/2 "2022-05-06T15:46:43Z")