It sounds like your system has had a number of versions installed to it over time.
Any older versions and patches which the current version is no longer dependent on can be removed. This also includes legacy AV engine updates (if the system was configured to download updates for these components automatically).
If you look at the /vcdrom directory from the command line you will be able to see individual directories for each downloaded patch/update.
You should then be able to use the "cf package remove" command to remove the older downloads. It has been a while since I've done this myself, but I believe if you try to remove a package that is still relevant the system won't allow you to do so.
Hope that helps.
thank you. " cf package remove package=XXX" was the helpful command. :-)