Browse documentation
Viewing missing patches
↩ Patches
The Patch Compliance page (Patches in the sidebar) lists the available — that is, missing — updates detected across your hosts. It's read-only: JOATOS shows you what's outstanding, but doesn't install anything.
The summary
Four cards show missing updates by severity — Critical, High, Moderate, Low — and a line summarises available updates · hosts behind · hosts scanned. A Most behind hosts table ranks the hosts with the most outstanding updates, showing each host's worst severity, critical count, and total updates.
The available-updates table
| Column | Shows |
|---|---|
| Severity | Critical, High, Moderate, Low, or Unspecified |
| Host | The server or endpoint (links to its detail page) |
| Update | The update identifier — e.g. KB5034441, a package name, or a macOS update — plus a reboot label if one is required |
| Source | Where it came from — Windows Update, APT, DNF, Pacman, or macOS |
| Available | The version the update moves to |
| Fixes | Any CVEs the update addresses |
Search by package, host, or CVE, and filter by severity. Updates sort by severity (most serious first).
How updates are detected
JOATOS checks each host for outstanding updates using the platform's own tooling:
- Linux —
apt(Debian/Ubuntu),dnf(RHEL/Fedora), orpacman(Arch) - Windows — the Windows Update Agent
- macOS —
softwareupdate
Checks run on a daily schedule, and you can run one on demand from a server's Patch tab with Check now. Detection is read-only — nothing is installed.
Coverage is expanding across platforms; Linux hosts (apt/dnf/pacman) are fully supported today, with broader Windows and macOS collection rolling out. A host shows in hosts scanned once it has been checked at least once.
Per-host patch view
Each server and endpoint has its own Patch tab showing that host's available updates and, where reported, its installed updates and OS build. See Viewing packages and services (servers) and Endpoint software and patches (endpoints).
Notes & tips
- Patch severity uses Moderate (vulnerabilities use Medium) — the two modules label their middle tier differently.
- The Fixes column ties updates back to CVEs, so you can jump between Vulnerabilities and Patches to find the update that closes a finding.