[hexadecimated]

Once a patch is released, it's generally quite straightforward to compare before and after, reverse engineering it to find the vulnerability. So the general advice is always to patch as soon as possible.

[nickpsecurity]

Even automatically... ;)

http://bitblaze.cs.berkeley.edu/papers/apeg.pdf