Re: [Pkg-grass-general] Re: e00compr
On Wed, Jun 08, 2005 at 11:53:00PM +0200, Petter Reinholdtsen wrote:
>
> [Frank Warmerdam]
> > Why distribute the avce00 library? Why not just install the avc
> > binaries as the package?
>
> One big advantage of using shared libraries is with security fixes.
> If there is a hole in a library, it only need to be fixed once, and
> all programs using it will pick up the fix. If it is staticly linked
> into several programs, all these programs need a rebuild to pick up
> the fix.
>
> > GDAL includes a copy of the AVC code (not too large) for it's own
> > Arc/Info binary feature coverage support.
>
> So if there is a security problem with the library, gdal need a
> rebuild, along with all the other users of the avc library?
>
I would add that bundles generally have habit to stale within third
parties packages. I had more and more experiences of bundled libraries
out-of-sync in respect with the true upstream versions...
That's definitively not a good idea.
--
Francesco P. Lovergine
Reply to: