* List all installed applications and libraries with versions

* Subscribe to all security advisories of those components

* Look for problems that hit your setup

* Take patch/corrective action when necessary

* OS update is good, but is not the final word in what you need to patch. You need to do your own homework