Allow me to contribute my personal opinion: just because a specific issue is not directly exploitable in itself, it's still dangerous as it can be chained with other exploits. It is best to always patch everything, especially if it's just a matter of updating a library (which would require no code changes).