In my use-case, I have Ubuntu machine which is part of organization network but disconnected from the Internet. Yet, somehow it should receive security updates.
How it is usually done in enterprises?
(for example, I know that for Windows machines IT distribute updates via Windows Update. Is there something similar for Linux?)