Every Linux distro manages this. You have the client machine determine which updates it needs, as it has access both to its own state, and to the package repository's manifest.