Updating Linux safely requires two separate actions: refresh the package metadata for your distribution, then install the upgrades it offers. Afterward, verify the transaction and security-advisory status, and check whether a service restart or reboot is needed before the patched code is actually running.
The correct workflow depends on your distribution
Linux does not have one universal updater. Ubuntu normally uses APT, while Fedora and Red Hat Enterprise Linux (RHEL) use DNF. Repository configuration, advisory metadata, automatic-update policies, and even the meaning of a clean result vary by distribution and release.
As an Amazon Associate I earn from qualifying purchases.
| System family | Package manager | Refresh metadata | Install available upgrades | Availability check | Transaction evidence | Security-advisory tooling |
|---|---|---|---|---|---|---|
| Ubuntu | APT | sudo apt update |
sudo apt upgrade |
apt list --upgradable |
APT command output and installed versions | Configured origins and Ubuntu automatic-update logs |
| Fedora | DNF | Part of the DNF update workflow | sudo dnf upgrade |
dnf check-update |
dnf history |
dnf updateinfo, when repository metadata supplies advisories |
| RHEL 9 | DNF | Use the RHEL 9 DNF procedure for your configured repositories | Use the documented RHEL DNF upgrade procedure | dnf check-update |
dnf history |
RHEL advisory data and DNF updateinfo features, subject to repository coverage |
Do not mix commands from different families. A package manager can report only on packages available through its configured repositories; it does not automatically assess separately installed applications, container images, language-package managers, or software downloaded outside those repositories.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →1. Identify the distribution and release
Before changing anything, identify the exact distribution and release. The release determines repository names, supported package-manager behavior, security pockets, and whether a command in an older guide still applies.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Run
cat /etc/os-releaseand read theID,NAME, andVERSION_IDvalues. - If available, run
hostnamectland note the operating-system line. - Confirm whether the machine is Ubuntu, Fedora, RHEL, or a downstream distribution with its own documentation.
- Open the update instructions for that distribution and major release before applying commands copied from another system.
Also establish whether the machine uses centrally managed repositories, a local mirror, or additional third-party sources. Those choices determine which updates can appear in the results.
2. Update Ubuntu with APT
Refresh the package index
On Ubuntu, begin with:
sudo apt updateThis downloads current package-index metadata from the repositories configured on the machine. It can report how many packages are eligible for upgrade, but it does not install those upgrades. Treating a successful refresh as a completed patch operation is the most common verification mistake.
Install the offered upgrades
After the refresh completes, run:
sudo apt upgradeRead the proposed transaction before accepting it. Review the package list, disk-space estimate, configuration-file prompts, and any messages about packages being kept back. The command records the package changes only after the transaction finishes successfully.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteUbuntu’s security guidance presents the sequence sudo apt update && sudo apt upgrade as a periodic manual workflow. Keeping the commands separate is often easier when you need to inspect the refresh output or troubleshoot a failed installation.
See what remains upgradeable
To list packages that the current APT metadata marks as upgradeable, run:
apt list --upgradableAn empty result means APT currently sees no applicable upgrades in the configured repositories. It does not prove that every program on the computer is patched, nor does it prove that a process has loaded a newly installed library.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Understand packages held back by phased updates
Ubuntu can phase some non-security updates, releasing them gradually to more systems. A package shown as held back may therefore be waiting for its assigned phase rather than failing. Ubuntu states that security updates are not phased. Do not force a held-back package merely to make the list empty; first determine whether the hold is intentional, caused by dependencies, or part of phased delivery.
3. Update Fedora and RHEL with DNF
Fedora: apply updates
Fedora’s documented package-update workflow uses:
sudo dnf upgradeDNF resolves dependencies, presents a transaction summary, and installs the selected package versions after confirmation. To target a particular installed package specification, Fedora also documents:
sudo dnf upgrade <package-installed-specs>Replace the angle-bracket text with the package specification on your system; do not type the brackets.
Check availability without installing
Use:
dnf check-updateThis checks whether updates are available. A positive result is an availability report, not evidence that an upgrade transaction has run. Conversely, a clean result applies only to the repositories and metadata currently configured.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Review what DNF changed
DNF records package transactions. Run:
dnf historyUse the transaction list to locate the update operation, then inspect the relevant transaction with the history details supported by your installed DNF version. The record helps establish which packages were installed, upgraded, downgraded, or removed and whether the transaction completed.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Inspect security advisories
DNF’s updateinfo command reads advisory metadata supplied by repositories. Start with:
dnf updateinfoDNF versions can provide advisory summaries, lists, and detailed views, including security-focused filtering. For example, an installation may support:
dnf updateinfo list securityCommand options and advisory filters differ among DNF versions and distributions, so check the command reference installed on the machine. Some filters distinguish advisories for newer package versions from advisories associated with versions already installed. Interpret the result in that narrow context: it reports what the current repositories say, not every vulnerability in every application.
RHEL-specific caution
RHEL 9 uses DNF but its repositories, subscription state, advisory identifiers, and supported security-update procedures are RHEL-specific. Keep RHEL instructions separate from Fedora instructions and use the RHEL 9 DNF documentation for security-related update commands. A command that works on Fedora may produce different advisory data, or no advisory data, on a RHEL system with different repositories enabled.
4. Verify what the update actually proves
Use several checks, because each answers a different question.
| Check | What it establishes | What it does not establish |
|---|---|---|
| Repository refresh completed | The package manager fetched current metadata from configured repositories. | It does not install package upgrades. |
| No upgrades reported | With the current metadata, no applicable updates are visible from those repositories. | It does not cover unconfigured sources, external applications, containers, or software managed by another tool. |
| Upgrade transaction completed | The package manager recorded package changes and installed versions can be inspected. | It does not prove every running process has reloaded the changed files. |
| No applicable security advisories | The advisory tool found no matching advisories under its current repositories and metadata. | It does not prove that all vulnerabilities have been eliminated. |
| Required restart or reboot completed | Services or the kernel can begin using the updated code. | It does not expand the package manager’s repository coverage. |
Confirm installed versions
After an upgrade, compare the installed package versions shown in the transaction output or package-manager queries with the versions offered by the current metadata. On DNF systems, combine the installed-version evidence with dnf history and dnf updateinfo. On Ubuntu, use the completed APT output and apt list --upgradable to establish what remains.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Do not equate a newer version with a guaranteed installation
DNF documents that an available newer package is not an absolute promise that a later upgrade transaction will install it. Dependency constraints and other transaction rules can prevent or defer a change. Investigate the transaction’s explanation rather than declaring the machine patched solely because a repository advertises a version.
Free tools Windows power users keep installed
One-click scans. No signup required.
5. Make sure patched code is running
Restart services that still hold old libraries
When a shared library or executable is replaced, a long-running service may continue using the old file it already loaded. Fedora’s software guidance warns that software in use can keep the previous version until it is reloaded. Follow the restart recommendation printed by the package manager and your maintenance policy. Restart only the affected service when that is sufficient, and account for availability, dependency order, and stateful workloads.
Ubuntu can use needrestart to identify processes affected by upgraded libraries. Its prompts and automatic behavior depend on local configuration; some cases are deliberately excluded from automatic restarting. Review the result instead of assuming that every service was restarted for you.
Reboot after a kernel update
A newly installed kernel does not become the running kernel until the system boots it. If the transaction updates the kernel, schedule a reboot during an approved maintenance window, then verify the running kernel with:
uname -rCompare that value with the kernel package installed by the transaction. A package can be present on disk while the system is still running the previous kernel.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
6. Check Ubuntu automatic security updates
Ubuntu’s unattended-upgrades can perform work equivalent to refreshing package lists and upgrading packages without an interactive session. Do not assume that every Ubuntu installation has identical settings.
Inspect allowed origins and schedule
The standard configuration uses:
/etc/apt/apt.conf.d/20auto-upgradesfor periodic update scheduling./etc/apt/apt.conf.d/50unattended-upgradesfor allowed origins and unattended-upgrade behavior.
The documented default for the described setup is a daily run, but administrators can change both the schedule and allowed origins. The configuration commonly permits the release’s security pocket and, where applicable, Extended Security Maintenance (ESM) security origins. Adding a repository does not automatically make it an allowed unattended-upgrade source.
Read the automatic-update logs
Inspect:
/var/log/unattended-upgrades/These logs show whether an automatic run occurred, which packages it considered, and whether installation or configuration errors interrupted it. Log evidence is stronger than assuming a timer or service is enabled.
Run a non-destructive dry run
To inspect what unattended upgrades would do without changing packages, use:
sudo unattended-upgrade -v --dry-runUse the output to identify allowed origins, pending updates, dependency issues, or configuration problems. A dry run is an inspection step; it is not proof that a later scheduled run will succeed if repository availability or package state changes.
7. Troubleshoot an update that does not look complete
The refresh fails to download metadata
- Read the repository URL, release name, signature, and network error in the command output.
- Check whether the machine’s clock, proxy, DNS, or repository credentials are correct.
- Confirm that the configured repository supports the installed release; do not substitute a different release name to silence an error.
- Resolve the repository problem and rerun the metadata refresh before judging upgrade availability.
The package list is empty, but a vendor says an update exists
- Determine whether the software came from the distribution repository or from a separate vendor, installer, container image, or language-package manager.
- Check that the relevant repository and component are enabled and that the local metadata is current.
- For Ubuntu, consider whether the release is in a phased rollout for a non-security update.
- For DNF, inspect advisory metadata with
dnf updateinfoand the transaction constraints reported by DNF.
The upgrade stops because of dependencies or configuration prompts
Do not delete packages or force a transaction without understanding the proposed changes. Record the packages named in the error, preserve configuration files when the service depends on local edits, and consult the distribution’s release-specific recovery procedure. After correcting the cause, rerun the upgrade and verify the resulting transaction rather than relying on the earlier partial attempt.
A security advisory still appears after upgrading
- Check whether the advisory applies to a newer package version that has not installed.
- Confirm that the installed version satisfies the advisory’s fixed-version requirement.
- Inspect DNF history or APT transaction output for a failed, skipped, or held package.
- Check whether the affected service or kernel still needs a restart or reboot.
- Verify that the advisory belongs to a repository your system actually uses; an advisory from another release or source is not evidence of a local installation state.
8. Know the limits of a clean result
A clean package-manager report is scoped evidence, not a universal security certificate. It covers packages known to the configured repositories at the time their metadata was refreshed. It may omit:
- Applications installed directly from vendor archives or source code.
- Third-party repositories that are disabled, unsupported, or not included in automatic-update origins.
- Container images and packages inside containers.
- Python, JavaScript, Ruby, Rust, or other language dependencies managed outside the distribution package manager.
- Firmware, appliances, and software maintained by a separate management platform.
For those components, use their own supported update and vulnerability-reporting process. Keep the evidence separated: an up-to-date Ubuntu or Fedora base system does not establish that an application bundled inside a container is patched.
Practical verification sequence
For a repeatable maintenance record, capture the distribution release, the metadata-refresh result, the upgrade transaction, the post-update availability check, advisory output where supported, and the restart or reboot decision. A concise record should state the repository scope and time of the check, because package and advisory results change as repositories publish new metadata.
Quick Recap
- Identify the distribution and release with
/etc/os-release. - Refresh metadata using the distribution’s documented command.
- Install the offered upgrades and save the transaction output.
- Run the distribution’s availability check to see what remains.
- Review advisory information where the repositories provide it.
- Inspect transaction history or logs for automatic updates.
- Restart affected services and reboot for a kernel update when required.
- Record software outside the package manager separately.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
