I then use "drush alias updatedb" for all sites in a multisite installation to make sure that all databases are updated.
(of course, I have a development multisite installation as well, so that I can test the updates first).
"drush site-alias"
gives you a list of all your aliases, so in principle, you could create script like this:
#!/bin/bash
for site in `/usr/local/drush/drush site-alias`
do
drush update
drush updatedb
done
(I repeat the drush update for all sites, in case some of the modules are not used by all sites)
However, that would update all your databases. Since I update develop first, I actually have two update scripts:
#!/bin/bash
for site in "firstdev" "seconddev" "thirddev" "forthdev"
do
echo "running updates for ${site}"
/usr/local/drush/drush @${site} up
/usr/local/drush/drush @${site} updatedb