Depending on that delay, it could be a significant security problem. A known (n-day) vulnerability is still very useful when software has a lag in updating there components.