Patching

I am currently at 2.5.919 - behind yes, but under direction from hq.

what do I need to do to get to 2.5.920 first?

what os patch and hot fixes and how do I do it ? Each machine or let it replicate?

newbie to this appliance even though I set up some of it.