Distros have been known to patch packages that wanted a fixed version of a dependency. In fact, most have it has their default policy.
- statically link a library
- have all binaries in the system use the same version of the library, and updated when the library needs to be updated.