# Installing server updates

> Install operating system and software updates on a server you manage yourself to patch security holes and bugs.

Source: https://helpcenter.ruachost.com/ssl-security/website-security/installing-server-updates/

Keeping your server updated is one of the most critical steps in maintaining security and stability. Updates patch vulnerabilities, fix bugs, and improve performance. On unmanaged servers, you are responsible for applying updates manually.

## Why Updates Matter

- Protect against newly discovered vulnerabilities (e.g., OpenSSL’s **Heartbleed** bug).
- Ensure compatibility with modern applications.
- Improve system performance and reliability.
- Reduce risk of data breaches and downtime.

## Updating Linux Servers

### Ubuntu/Debian

1. Update package lists:

   ```bash
   sudo apt update
   ```
2. Upgrade installed packages:

   ```bash
   sudo apt upgrade
   ```
3. Apply full distribution upgrades:

   ```bash
   sudo apt dist-upgrade
   ```
4. Reboot if kernel updates were applied:

   ```bash
   sudo reboot
   ```

### CentOS/RHEL

1. Update all packages:

   ```bash
   sudo yum update
   ```

   or (on newer versions):

   ```bash
   sudo dnf update
   ```
2. Reboot if kernel updates were applied:

   ```bash
   sudo reboot
   ```

## Updating Windows Servers

1. Log in to the server via **Remote Desktop**.
2. Open **Windows Update** from the Control Panel or Settings.
3. Check for updates and install all critical patches.
4. Reboot the server to apply changes.

> **Note:**
- Always back up critical data before applying updates.
- Test updates in a staging environment if possible.
- Schedule updates during low‑traffic periods to minimize disruption.
- Monitor vendor advisories for urgent patches.