Handy Linux (Ubuntu) Commands

server-admin.sh

# Show security updates only:

apt-get -s dist-upgrade |grep "^Inst" |grep -i securi

# Show all upgradeable packages

apt-get -s dist-upgrade | grep "^Inst"

# Install security updates only

apt-get -s dist-upgrade | grep "^Inst" | grep -i securi | awk -F " " {'print $2'} | xargs apt-get install

# Check what services need to be restarted after package upgrades.
# Figure out what packages you are going to upgrade beforehand and schedule your restarts/reboots.
# The problem here is that unless you restart a service it still may be using an older version of 
# a library (most common reason) that's been loaded into memory before you installed new package 
# which fixes a security vulnerability or whatever.

checkrestart -v