4 ms·

One tradeoff is security. If you're patching vulnerabilities, then just a single .so needs to be patched. With static linking every binary needs to be investiga

• nickez 5y ago
  You can also argue that it is impossible to update dynamic libraries because they are used by multiple applications and you can't afford that any application breaks. So instead of being able to patch that one application where the security is needed, you now have to patch all of them.
  • gspr 5y ago
    > You can also argue that it is impossible to update dynamic libraries because they are used by multiple applications and you can't afford that any application breaks. That's where maintenance branches comes in. You fix only the security issue, and push out a new version.