How to Install Security Updates in Ubuntu

One of the easiest ways to protect your Ubuntu systems is by keeping up to date software on them. Therefore applying updates frequently is an important part of maintaining secure systems. In this article, we will show how to install security updates in Ubuntu and Linux Mint systems.

Intalling Security Updates on Ubuntu

If your system has the update-notifier-common package installed, Ubuntu will alert you about pending updates via the message of the day (motd) upon console or remote login.

Once you have logged into your Ubuntu system, you can check for new updates using the following apt command.

$ sudo apt update
Install Security Updates on Ubuntu
Install Security Updates on Ubuntu

Updating a Single Package on Ubuntu

To check and update a single package, for example, a package called php, after updating your system’s package cache, then update the required package as follows. If the php package already installed it will try to update to the latest version available:

$ sudo apt-get install php
Update a Package on Ubuntu
Update a Package on Ubuntu

Upgrading a Ubuntu System

To list all the newly available updates for your Ubuntu system, run:

$ sudo apt list --upgradable
List Ubuntu Upgrades
List Ubuntu Upgrades

To install all updates, run:

$ sudo apt-get dist-upgrade

Installing Latest Security Updates Automatically on Ubuntu

You can use the unattended-upgrades package to keep the Ubuntu system with the latest security (and other) updates automatically. To install the unattended-upgrades package if it isn’t already installed, run the following command:

$ sudo apt-get install unattended-upgrades
Install Unattended Upgrades on Ubuntu
Install Unattended Upgrades on Ubuntu

To enable automatic updates, run:

$ sudo dpkg-reconfigure unattended-upgrades

Then configure the package to install automatic updates by selecting yes from the interface below.

Enable Automatic Updates on Ubuntu
Enable Automatic Updates on Ubuntu

Attention: Please note that updates may restart services on your server, so applying updates automatically may not be appropriate for all environments particularly servers.

You can run unattended-upgrades manually also:

$ sudo unattended-upgrade

Or add the -d flag to enable debugging mode:

$ sudo unattended-upgrade -d
Running Unattended Upgrades Manually
Running Unattended Upgrades Manually

That’s all for now. For any queries or comments, you would like to share with us, use the comment section below.

If you liked this article, then do subscribe to email alerts for Linux tutorials. If you have any questions or doubts? do ask for help in the comments section.

If You Appreciate What We Do Here On TecMint, You Should Consider:

TecMint is the fastest growing and most trusted community site for any kind of Linux Articles, Guides and Books on the web. Millions of people visit TecMint! to search or browse the thousands of published articles available FREELY to all.

If you like what you are reading, please consider buying us a coffee ( or 2 ) as a token of appreciation.

Support Us

We are thankful for your never ending support.

Got something to say? Join the discussion.

Have a question or suggestion? Please leave a comment to start the discussion. Please keep in mind that all comments are moderated and your email address will NOT be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.