Any bugs in a system update should have been found in proper testing on Pre-Productive parallel system, sounds like this was inadequate or non-existent. Also to have no roll-back parallel run scenario when you update systems is very poor planing too.