2 ms·
i dont see how that's true. in both worlds, a developer has to take the manual action to review published vulnerabilities and track down repos they own that are
by kbar13 8y ago
i dont see how that's true. in both worlds, a developer has to take the manual action to review published vulnerabilities and track down repos they own that are affected and upgrade the dependencies.
- eeZah7Ux 8y agoNo: with dynamic linking, and especially with Linux distributions, most of the work is automated and the patching is done by the distribution security team. The time to write a patch and deliver it to running systems goes down to days or, more often, hours.