Distributions generally backport security fixes, so a plain comparison of upstream version numbers won't generally work. You need to understand your distribution's versioning scheme and check package changelogs.

However, distributions generally release updates to their stable releases. Just install them. Installing security updates automatically is even better (better to have the occasional rare regression than a compromise and have to re-deploy the whole server).