vulnerability warning CVE-2022-2097

[eli-darkly]

LD has opened this issue to let everyone know that we're aware of this vulnerability report, and we will release a patch version of our Docker image to address it as soon as possible.

It's our policy to make any necessary dependency/platform updates for such issues no matter what, but we also look into the details to determine how much of an actual risk these represent, if any, to Relay Proxy installations that are currently running. Here is our analysis:

• We do not think this openssl vulnerability applies to the Relay Proxy. For making or receiving secure connections, the Relay Proxy does not use openssl; instead it uses the Go runtime's TLS implementation.

[eli-darkly]

This is fixed in the 6.7.10 release.