Forgot to say - for server setups, I always test updates on a shadow machine before applying them to server itself - something that is prudent policy regardless of which distro you're using.