Security updates without rebooting

Hello all,

Can someone explain how to apply security patches on the system without 
rebooting the machine?

I guess that I cant patch the kernel without compiling and rebooting the 
machine, so the only way is with iptables and keeping the daemons "fresh"?

Regards,

Carlos Silva,

http://osiris.csilva.org/