How to manually apply security patches to custom builds?

I have a few devices running LineageOS and e/OS. I’d like to learn how to apply a security patch without needing to compile the whole ROM again and again (if such thing is possible).

I think you have to compile again to generate a new, more recent, build. (And sync the repo before.)

Fortunately, the second build is much faster than the first one.