Shouldn't need single user, and can install over the top.
If you try and remove, you'll probably find that they have so many dependancies it fails (for a given patch you may have to remove others before you can remove it).
I would make sure you have a backup first ... in fact a "full" make_recovery_tape would be a good idea (use the -a option).
Martin