"AirBorne" AirPlay vulnerability

[kennymc-c]

Some tech media outlets recently have been reporting about a new vulnerability that affects the AirPlay protocol called "AirBorne" (https://www.oligo.security/blog/airborne)
While Apple seems to have already fixed this in their updates 3rd party devices could be vulnerable as well. Will Shairport-Sync be updated to fix this?

[mikebrady]

Thanks — I had seen this. These vulnerabilities seem to be confined to Apple devices or third party devices using Apple software. Apart from the optional Apple ALAC decoder, which is now deprecated, Shairport Sync does not use Apple software, so these warnings do not apply.

It may well be that Shairport Sync has other (unknown) vulnerabilities, so we can take nothing for granted.