Yes: dynamic linking allow receiving OS security updates for any library. With static linking you become responsible for: - tracking down the dependencies use

Yes: dynamic linking allow receiving OS security updates for any library. With static linking you become responsible for: - tracking down the dependencies used during a build - track where the binary is deployed - follow publishing of vulnerabilities affecting the libraries you used - either backport security fixes, rebuild and deploy the binary or deploy a newer version hoping it does not break anything