Thanks Francois!
There were updates after 2014, not sure if they are download only. One of the latest:
https://support.microsoft.com/en-us/help/4500705/customer-guidance-for-cve-2...
I guess these updates might be useful to have just to be safe. That being
said, since these are VM's, would the corresponding vulnerabilities negatively affect the testbot?