So Ubuntu has this model where they pretty much freeze package versions for an Ubuntu release after release, and then they only backport security updates from upstream. There's nothing new here, most distros do it this way. The idea is that this way they can polish the gazillions of package versions
Fedora is the only other “server distro” that I know of but obviously you can install any distro and just omit the desktop environment from the install.