Run the update command to refresh the repos:
sudo apt update
Pull any upgradeable packages:
apt list --upgradable
Install any outstanding updates:
sudo apt upgrade -y
Reboot server so its clean:
sudo reboot
Once the server is back up run the above again to catch any additional entries.
Snapshot/backup