When I log into my Ubuntu 18.04 LTS system, I get this message:

5 additional security updates can be applied with ESM Apps.

Learn more about enabling ESM Apps service at https://ubuntu.com/esm

My question is how I find out what packages need these ESM updates. I thought the answer was "apt update && apt upgrade" but this does not show that any updates are needed:

# apt update && apt upgrade

Hit:1 http://dl.google.com/linux/chrome/deb stable InRelease

Hit:2 http://us.archive.ubuntu.com/ubuntu bionic InRelease

Hit:3 http://security.ubuntu.com/ubuntu bionic-security InRelease

Hit:4 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease

Hit:5 http://us.archive.ubuntu.com/ubuntu bionic-backports InRelease

Reading package lists... Done

Building dependency tree

Reading state information... Done

All packages are up to date.

Reading package lists... Done

Building dependency tree

Reading state information... Done

Calculating upgrade... Done

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

How do I figure out what 5 packages need ESM security updates? If they aren't packages I use, I'll just delete them.

EDIT for additional clarity: I'm not trying to update the packages. I'm trying to get a list of them so I can delete them if I don't use them.