Maybe "release" isn't the correct term. Ubuntu publishes new AMIs with the latest security patches quite regularly. When I spin up a new instance on say 14.04 I want it to boot with a fully patched kernel.