On 08/05/10 06:41, anatoly techtonik wrote: > 80kb of duplicated > code (even 8Mb) doesn't worth wasted time for troubleshooting in 2010. > It may be a reason for security, but why not just let packages > register their used version in Debian registry and track it there?
Because if there's a security hole in that code, you would need to make a lot of DSAs (see the recent problem with expat that was embedded in a lot of places). That's even worse than statically linking, since those embedded copies are forks of their original upstream many times. Emilio -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4be52601.6060...@debian.org
