On Snapt One images you are able to patch the system to keep it up to date. This utilizes the zypper binary for the older OpenSuse Snapt One Images and apt-get for the new Snapt One Ubuntu Images.
Certain patches will be marked as interactive which means that they require your input or permission to reboot, etc.
To apply these you may run the following on the command line:
OpenSuse:
sudo zypper patch
Make sure to never run an update though, try only perform patches!
Ubuntu:
apt-get update && apt-get upgrade
After a large number of patches have been applied we recommend that you perform a restart of the system.