2 ms·

> Will security vulnerabilities in libraries that have been statically linked cause large or unmanagable updates? This is maybe not an issue for open source pa

> Will security vulnerabilities in libraries that have been statically linked cause large or unmanagable updates? This is maybe not an issue for open source packages which are managed by your distribution package manager, assuming they update all the dependent packages once some library gets updated (which would lead to a lot more updates all the time). However, the maybe more critical issue is about other independently installed software, or maybe closed source software, where you will not automatically get an update once some library gets updated.

cosmojg 6y ago
> However, the maybe more critical issue is about other independently installed software, or maybe closed source software, where you will not automatically get an update once some library gets updated. If you care about security, you shouldn't be running closed source software anyway, at least not outside of a container. Statically linked binaries for open source software, containers for everything else, and you're good to go.