/usr/sbin/update-ipsets is in firehol-tools 3.1.5+ds-1ubuntu1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/sbin/../lib/firehol/update-ipsets
/usr/sbin/../lib/firehol/update-ipsets