Works for an OS that is not connected to the internet.
You're probably doing this:
1. disable automatic updates
2. hope that no vulnerability is discovered for a month
3. apply all available patches
4. goto 2
You're probably doing this:
1. disable automatic updates
2. hope that no vulnerability is discovered for a month
3. apply all available patches
4. goto 2