Browse documentation
Viewing missing patches
↩ Patches
The Patch Compliance page (Patches, under Operations in the top bar) lists the available — that is, missing — updates detected across your hosts. It's read-only: JOATOS shows you what's outstanding, but doesn't install anything.
The summary
Four cards show missing updates by severity — Critical, High, Moderate, Low — and a line summarises available updates · hosts behind · hosts scanned. A Most behind hosts table ranks the hosts with the most outstanding updates, showing each host's worst severity, critical count, and total updates.
The available-updates table
| Column | Shows |
|---|---|
| Severity | Critical, High, Moderate, Low, or Unspecified |
| Host | The server or endpoint (links to its detail page) |
| Update | The update identifier — e.g. KB5034441, a package name, or a macOS update — plus a reboot label if one is required |
| Source | Where it came from — Windows Update, APT, DNF, Pacman, or macOS |
| Available | The version the update moves to |
| Fixes | Any CVEs the update addresses |
Search by package, host, or CVE, and filter by severity. Updates sort by severity (most serious first).
How updates are detected
JOATOS checks each host for outstanding updates using the platform's own tooling:
- Linux —
apt(Debian/Ubuntu),dnf(RHEL/Fedora), orpacman(Arch) - Windows — the Windows Update Agent
- macOS —
softwareupdate
Checks run on a daily schedule, and you can run one on demand from a server's Patch tab with Check now. Detection is read-only — nothing is installed.
Available updates are collected on Linux only. Linux hosts (apt/dnf/pacman) report the updates they're missing. Windows and macOS hosts report their installed updates and OS build, but missing-update collection for those platforms is not yet available — so a Windows host with pending updates will not show them here. A host appears in hosts scanned once it has been checked at least once.
Per-host patch view
Each server and endpoint has its own Patch tab showing that host's available updates and, where reported, its installed updates and OS build. See Viewing packages and services (servers) and Endpoint software and patches (endpoints).
Notes & tips
- Patch severity uses Moderate (vulnerabilities use Medium) — the two modules label their middle tier differently.
- The Fixes column ties updates back to CVEs, so you can jump between Vulnerabilities and Patches to find the update that closes a finding.