19 ms·

Security + build time isn't the issue, but security + dev/testing time is. Maintaining a secure package of zlib takes linearly more time with more versions of

Security + build time isn't the issue, but security + dev/testing time is. Maintaining a secure package of zlib takes linearly more time with more versions of it used. All distros are manpower limited.

Arnavion 2y ago
There's only one version of zlib, the distro-packaged version, in the scenario of this discussion.
- CRConrad 2y ago
  As I read it, that's 100% wrong: Isn't the discussion precisely about using the distro-packaged version vs. having other versions statically linked?