[ANNOUNCE] Apache Traffic Server is vulnerable to a DOS attack in the experimental Slicer plugin

[Bryan Call]

Description:
ATS is vulnerable to a remote DOS attack on the experimental Slicer plugin.

CVE:
CVE-2021-27737

Reported By:
Brian Olsen

Vendor:
The Apache Software Foundation

Version Affected:
ATS 9.0.0

Mitigation:
9.x users should upgrade to 9.0.1 or later versions

References:
        Downloads:
                https://trafficserver.apache.org/downloads
                (Please use backup sites from the link only if the mirrors are 
unavailable) 
        CVE:
                https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27737

-Bryan