[NTLUG:Discuss] apt-get, rpm and library versioning (was: Debian)

[Burton Strauss]

-----Original Message-----
From: discuss-bounces at ntlug.org [mailto:discuss-bounces at ntlug.org] On Behalf
Of Leroy Tennison
Sent: Thursday, June 23, 2005 11:09 PM
To: NTLUG Discussion List
Subject: Re: [NTLUG:Discuss] apt-get, rpm and library versioning (was:
Debian)

Burton Strauss wrote:

<snip />

>You know, I think it's time to stop trying to simplify our life.  If
SuperDuperFunction is going to be 
>so much different than SuperFunction then create >another library.  Yes,
this profilerates 'executables' 
>but allows older code to still work without creating a 'jet-powered
stagecoach' combination of the latest 
>and greatest whiz-bang features along with backwards compatibility.  DASD
is getting really cheap, may 
>as well use it.


Nope, that's no better.

You end up with 100s of versions of popular libraries hard linked into
programs (that's what STATIC linking does).

Then when you find a problem in, say, OpenSSL, you have to replace EVERY
single hard-linked package.  Miss ONE and you are exposed to the security
problems.  Dynamic linking means you only have to replace the one .so file.


-----Burton