Apt patching is completed by executing apt-get update && apt-get upgrade. Additional options can be set to control how this is executed.
apt-get update && apt-get upgrade
List of packages to exclude from update. These packages will be excluded
An exclusive list of packages to be updated. These are the only packages that will be updated. If these packages are not installed, they will be ignored. This field cannot be specified with any other patch configuration fields.
By changing the type to DIST, the patching is performed using apt-get dist-upgrade instead.
apt-get dist-upgrade