Users of OSS platforms really expect security to be taken seriously so Nokia should figure out a way of pushing security fixes to supported platforms in a timely manner.

The Nokia devs appear to hang out on the Maemo users & developers mailing lists so those would probably be better places to ask though.

My guess is that we'll have to wait until the first OS2008 maintenance release (and what about people using N770, or OS2007?).

It is my understanding that the next full release after OS2008/Chinook, or "Diablo", is intended or hoped to be capable of Debian/Ubuntu-style system updates.