Thanks for all the comments - I shall certainly take a look at WSUS.
Would still be interested if anyone has news of a web site that gives a concise description of what the various patches are all about - for example: Do I really need .NET framework?