[lsaferite]

You generate a fresh build with the updated libraries.

[dikaiosune]

Exactly. This also ties in nicely with a test-heavy build process to make sure that said security updates don't cause any regressions.

EDIT: To give you a chance to catch those regressions, at least.