How to Patch Vulnerabilities

Step 1: Check for Available Security Updates

sudo apt update && sudo apt list --upgradable 2>/dev/null | grep security

Step 2: Apply Security Updates Only

sudo unattended-upgrades --dry-run
sudo unattended-upgrades

Step 3: Apply All Updates (Recommended)

sudo apt upgrade -y

Step 4: Reboot if Kernel Updated

if [ -f /var/run/reboot-required ]; then sudo reboot; fi

Step 5: Verify Patch Level

sudo apt-show-versions | grep security