content: For things that you don't hack at, like OpenSSL and all the Kernel modules and Libraries, it shouldn't be "latest updates" anyway, unless it is a vector or flaw which specifically effects you. Anything in production, in my opinion, should be using Long Term versions of software which have slow update release cycles. On those, in my opinion [again] it is safe to perform the updates as soon as they are released.