On Tue, Apr 12, 2016 at 9:37 AM, Stian Thorgersen <sthorger@redhat.com> wrote:
It depends on the severity of the vulnerability. If it's critical a minor release will be done (of everything) asap. Bugs and improvements will not be pushed out more frequently than 6 weeks.
Which, I suppose, is a good argument for using as few 3rd party modules as possible. :)