If you don't have them yet, create a new view for Upgrades
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-2-computer-groups-update-views/
Use the Approvals Process on the Upgrades view (https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-6-selecting-your-test-systems-the-approvals-process/) to see what upgrades are applicable to your systems. Approve them when you're ready.
WSUS should then download the upgrades properly and when systems check in with WSUS, they will be able to update them.
If client systems are having problems - ensure you have set the required settings/products/classifications/mimetypes for the systems to download and install the upgrades.
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-3-windows-as-a-service-waas-and-group-policy-administrative-templates/