WSO2 API manager is independent of OS packages. So there shouldn't be a problem when upgrading the OS packages. But as you have mentioned, better to do this in a testing environment and proceed.