1.6 Patch Management

1.6.1 Security Dashboard Enhancements

  • Added a Vulnerability Status filter in the Top CVEs dashlet and CVE Severity Distribution dashlet. In previous releases, the dashlets displayed a CVE that applied to devices regardless of whether or not any of the devices remained vulnerable (not patched) to the CVE. In Update 1, the Vulnerability Status filter lets you display only the CVEs with currently vulnerable (not patched) devices. After the system update, the two default dashlets have the filter automatically applied; however, custom dashlets must be edited to turn on the filter. For more information, see CVE Reference.

  • Added the ability to easily create CVE Tracker dashlets from the Top CVEs dashlet and CVE Severity Distribution dashlet by selecting the desired CVEs from the dashlet's CVE list and using the Create CVE Tracker option.

  • Added the ability to easily create Patch Tracker dashlets from the Recently Released Patches dashlet and the zone Patches list by selecting the desired Patches from the Patch list and using the Create Patch Tracker option. For more information, see CVE Reference and ZENworks Patch Management Reference.

  • Added the ability to pin Patch dashlets to the Security dashboard.

1.6.2 Custom Patch Enhancement

Using the Custom Patch feature, you can now monitor patches that are downloaded manually, from external sources (not through the Patch subscription), using ZENworks Patch Management. For example, the Windows 7 ESU patches. The Custom Patch feature has been enhanced to enable you to define the criteria that makes the custom patch applicable to a device and also define the criteria that indicates a device is patched. For more information, see Create a Custom Patch in the ZENworks Patch Management Reference.

1.6.3 User interface displayed while applying patches during shutdown

From this release onwards, instead of the PowerShell window, a user interface is displayed while applying patches at shutdown.