Bro v2.3.1 has been released. This release addresses a potential DOS vector using specially crafted DNS packets. It also fixes a bug in the OCSP validation code that could lead to crashes as well as a memory leak. The source distribution and binary packages are available on our downloads page.
See CHANGES for the full commit list.
Since this release addresses a bug fix, we encourage users to review and install at their earliest convenience.
Feedback is encouraged and should be sent to the Bro mailing list.
The Bro Team