I get security updates pretty soon after they're released on the Debian mailing list, actually. Logging on this morning I have an update for the gstreamer issues.

I use Debian for servers though.