gnutls - how will future security fixes be handled

As soon as quick fix or a need to wait upcoming update?

"As soon as possible", does this mean with an urgent, out of cycle update?

@bart - I don't know the release process in Jolla but... it would be feasable, after all, SailfishOS can work as most desktop distribution in this regard: publish the rpm on the repository, and the package can be upgraded on its own, without "bumping" any global version.Actually, unless you need to update major parts of the system, it would be the best way to handle upgrades...

I am not shure but some Jolla people said that they only want to bump and not to upgrade single packages, didn't they? (where was this interview, w00t on tmo... ??)

They can want things, but I expect at least a secure device. Some issues warrant a hotfix, such as this GnuTLS (my desktop had the update before the problem became public).