Depending on how much has changed in the interval, backporting security fixes can be completely trivial, very difficult, or anywhere in between. There may not even be a fix to backport, as not all vulnerabilities are still present in the latest release.