Recently I wrote about cherry picking upgrades. Sometimes you'll want to do the inverse.
aptitude upgrade updates ubuntu debian
So, doing an apt-get upgrade on a Debian or Ubuntu machine sometimes does more than you want at once.
When you're monitoring security update availability using Zabbix or some other monitoring tool, you'll need a method to discern regular updates from security updates.
zabbix ubuntu monitoring updates debian