Hacker News new | ask | show | jobs
by robert_foss 614 days ago
Security + build time isn't the issue, but security + dev/testing time is.

Maintaining a secure package of zlib takes linearly more time with more versions of it used.

All distros are manpower limited.

1 comments

There's only one version of zlib, the distro-packaged version, in the scenario of this discussion.
As I read it, that's 100% wrong: Isn't the discussion precisely about using the distro-packaged version vs. having other versions statically linked?