3 ms·
No, both docker, static linking and flatpak share the same issue with being unable to provide reliable and tested security updates. Once you bundle multiple li
by goodpoint 4y ago
No, both docker, static linking and flatpak share the same issue with being unable to provide reliable and tested security updates.
Once you bundle multiple libraries into blobs you always have the same security nightmare:
https://www.researchgate.net/publication/315468931_A_Study_of_Security_Vulnerabilities_on_Docker_Hub https://www.researchgate.net/publication/315468931_A_Study_o...
(and on top of that docker adds a big attack surface)