How do you know what's a zero day fix?

(You write something)

So then you have to check every package's updates and decide if you update, yes?