Check and Install Security Updates on Ubuntu 22.04 with Easy Steps

In this tutorial, we aim to guide you through the process of Check and Install Security Updates on Ubuntu 22.04. Security updates in Linux are crucial packages and system component updates that address security vulnerabilities or enhance the overall robustness of the system.

These updates can be quite critical, and applying them promptly is essential to safeguard your server against severe exploits, such as the previously discovered Log4J vulnerability.

Follow the steps provided in this guide to efficiently Check and Install Security Updates on Ubuntu 22.04.

To successfully implement these security updates on your Ubuntu system, you’ll need to log in to your server as either a root user or a non-root user with sudo privileges. For guidance on setting up a user with sudo privileges, you can refer to our tutorial on Initial Server Setup with Ubuntu 22.04.

1. Check Security Status on Ubuntu 22.04

To determine the status of installed packages regarding security updates on your Ubuntu 22.04 system, you can utilize the following command:

ubuntu-security-status

2. Install Update Packages on Ubuntu 22.04

At this stage, you can update all the packages on your system to install the newly released updates. Execute the command below:

apt update

Find Upgradeable packages on Ubuntu 22.04

Now, to identify the packages that have available upgrades, use the following command:

apt list --upgradable

Upgrade Packages on Ubuntu 22.04

To install all the available upgrades for the packages on your Ubuntu 22.04 system, simply execute the following command:

apt upgrade -y

Upgrade Ubuntu 22.04 Kernel

To specifically upgrade the Ubuntu kernel, you can use the command below:

apt full-upgrade -y

Upgrade Kept back packages on Ubuntu 22.04

Packages marked as "kept back" indicate that newer versions are available but will not be installed automatically. This might be due to dependency issues or new dependencies that need to be resolved.

To attempt to upgrade these "kept back" packages, use the following command:

apt dist-upgrade -y

Conclusion

You have successfully learned how to Check and Install Security Updates on Ubuntu 22.04. You can now easily check for available updates and upgrade packages on your Ubuntu system using the provided Linux commands.

Hopefully, this guide on security updates Ubuntu has been helpful. You might also find these articles interesting:

Set up Bitwarden on Ubuntu 22.04
Install and Configure Prometheus on Ubuntu 22.04
Set up AIDE on Ubuntu 22.04
Set up Portainer on Ubuntu 22.04

Alternative Approaches to Checking and Installing Security Updates on Ubuntu 22.04

While the apt command-line tools are a standard and effective way to manage updates, there are alternative methods that can be used to Check and Install Security Updates on Ubuntu 22.04. These alternatives offer different levels of automation, granularity, and user interface options.

1. Using Unattended Upgrades

Unattended Upgrades provide an automated way to install security updates on Ubuntu. It allows you to configure your system to automatically download and install security updates without requiring manual intervention. This is particularly useful for servers where uptime and security are paramount.

Explanation:

Unattended Upgrades work by periodically checking for available security updates. When updates are found, they are automatically downloaded and installed. This process can be configured to run daily, weekly, or at any other desired interval. The configuration file /etc/apt/apt.conf.d/50unattended-upgrades controls which updates are automatically installed.

Steps to Configure Unattended Upgrades:

Install the unattended-upgrades package:
```
sudo apt install unattended-upgrades
```
Configure Automatic Updates:

Edit the /etc/apt/apt.conf.d/50unattended-upgrades file to specify which updates should be automatically installed. Open the file with a text editor:
```
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
```
Within this file, you can uncomment and modify the Unattended-Upgrade::Allowed-Origins section to specify which repositories should be considered for automatic updates. By default, security updates are enabled.
```
Unattended-Upgrade::Allowed-Origins {
    "${distro_id}:${distro_codename}-security";
    // "${distro_id}:${distro_codename}-updates";
    // "${distro_id}:${distro_codename}-proposed";
    // "${distro_id}:${distro_codename}-backports";
};
```
You can also configure whether to automatically reboot the system after updates in the Unattended-Upgrade::Automatic-Reboot section.
```
Unattended-Upgrade::Automatic-Reboot "false";
```
Set this to "true" if you want the system to reboot automatically after updates. Be cautious when enabling this on production servers, as unexpected reboots can cause downtime.
Enable Automatic Upgrades:

Create a file /etc/apt/apt.conf.d/20auto-upgrades with the following content:
```
sudo nano /etc/apt/apt.conf.d/20auto-upgrades
```
Add the following lines to the file:
```
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
```
The Update-Package-Lists "1" line tells the system to update the package list daily. The Unattended-Upgrade "1" line tells the system to perform unattended upgrades daily.
Test Unattended Upgrades:

You can manually trigger an unattended upgrade to test your configuration:
```
sudo unattended-upgrade -v
```
The -v option provides verbose output, allowing you to see what updates are being installed.

Benefits:

Automation: Automatically installs security updates, reducing the need for manual intervention.
Security: Ensures that your system is always up-to-date with the latest security patches.
Configuration: Highly configurable to meet specific needs and preferences.

Drawbacks:

Reboot Control: Requires careful configuration to avoid unexpected reboots.
Limited Granularity: Less control over individual package updates compared to manual apt commands.

2. Using `apticron` for Notifications

apticron is a simple tool that sends email notifications when there are pending updates for your Ubuntu system. While it doesn’t automatically install updates, it provides a convenient way to stay informed about available security patches, allowing you to then manually Check and Install Security Updates on Ubuntu 22.04.

Explanation:

apticron checks for package updates on a regular schedule and sends an email to a specified address if updates are available. This is particularly useful for systems where you prefer to manually review and install updates, but want to be notified when they are available.

Steps to Configure apticron:

Install apticron:
```
sudo apt install apticron
```
Configure Email Notifications:

During the installation, you will be prompted to enter the email address to which notifications should be sent. You can also modify the configuration file /etc/apticron/apticron.conf to change the email address or other settings.
```
sudo nano /etc/apticron/apticron.conf
```
The important settings in this file include:
- EMAIL: The email address to send notifications to.
- REPORT_ONLY: If set to "true", apticron will only report on updates and not attempt to install them. This is the recommended setting for manual update management.
Test apticron:

You can manually run apticron to test the configuration and send a test email:
```
sudo apticron
```