How fast are vulnerability patches released?
Our goal is to have patches for vulnerabilities released on the same day the vulnerability is made public.
The actual release time depends on how the visibility was disclosed and how much testing it requires. Based on our experiences with Drupal 6, the vast majority of vulnerabilites will have a tested patch for remediation on same day or the next day.