vulnerability warning CVE-2022-27191

[eli-darkly]

LD has opened this issue to let everyone know that we're aware of this vulnerability report, and we will release a patch version of our Docker image to address it as soon as possible.

It's our policy to make any necessary dependency/platform updates for such issues no matter what, but we also look into the details to determine how much of an actual risk these represent, if any, to Relay Proxy installations that are currently running. Here is our analysis:

• We do not think this vulnerability applies to the Relay Proxy. Based on this description, the vulnerability would allow an attacker to crash an SSH server that was configured in a specific way. The Relay Proxy does not operate an SSH server; it neither directly nor indirectly uses crypto/ssh.

[eli-darkly]

Fixed in the 6.7.5 release.