Thanks for investigating and reporting upstream, Chris. It does indeed look like our packages should just be plain rebuilds, so I'll mark this 'Won't Fix'. (None of the descriptions feel quite right, but I do think it's fair to say that probably no one's going to bundle fixes for something that we don't build.)
Thanks ** Changed in: shairport-sync (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1729668 Title: Vulnerability in tinysvcmdns To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shairport-sync/+bug/1729668/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs