Security fixes are usually backported for affected versions, and presumably Colin installed these updates. This depends on the distribution you choose and if yo

Security fixes are usually backported for affected versions, and presumably Colin installed these updates. This depends on the distribution you choose and if you are running a release where they have guaranteed critical updates (i.e. Ubuntu LTS releases). What you do miss out on is new protocol support, which for TLS can be a huge problem when secure and compatible crypto options run out. (Sadly, people will usually err on the side of compatibility, which in the past boils down to the terrible RC4)