I have a few VPS based on Ubuntu and I have an alert on my calendar to login from time to time and update the packages and keep up with security fixes.
Here’s the sequence I use (it’s mostly a note to myself for the next time I forget)
Connect as root to the server, then you run:
to get the packages index updates.
to actually update the packages.
Then, if needed (depends on the kind of packages that needed an update), reboot the system:
Download my free Programming Ebooks!