+1 to updating them. It's bordering on insane to backport security fixes to 11 previous versions released up to 4 years ago. That's not sustainable and takes time that would be better spent on the more recent releases.