Depends on how much it breaks, how risky the vulnerability is, what mitigating controls are in place, etc. That's all part of vulnerability management and business risk management. But typically, you upgrade you the safe versions and fix anything that's broken.