I got update notification via Discover and wanted to check how Myrlyn handles that. Relatively simple, even for the first time. Main advice it to read 
- Use “Update” tab,
- Read left panel for all options,
- Use button “Package update”
- Accept.
Obviously little more complicated than Discover, but also more informative. - You see 4 panels: left “To do” list, middle top “Download” list, middle bottom “Doing” (work in progress; only 1 package), left is “Done” list.
Note that Myrlyn will mark for update only packages that have no problems.
Simple update story ends here :))
If you have some packages left they will have “sad face” icon in version column.
When you click on check box it will turn on update, but you will see dialog that will ask you for your opinion. There will be resolution options that is only sometimes easy to read; not Myrlyn problem, but version habits by programmers creating packages.
From image it is not easy to read, on my screen default question window is not even wide enough to take whole line and some version text is concatenated. Luckily expanding to the right gives whole strings.
At first I stopped because first option mentioned deinstallation. Read again with version strings being main problem, and all it was proposing is to remove vulnerable module and replace it with fixed.
Why all this writing - Discover did not mention ovpn update. I did not try zypper, but zypper up should give same as Myrlyn.