Version: 4.2.6.123 + Connector 4.2.6.21 (Feb 25th, 2024)

Latest UR available on our 4.2.6 Live Repo
Review our pre- and post-upgrade best practices.

• 4.2.6 UR1 (build 132) - Mar 5, 2024
• 4.2.6 UR2 (build 142) + Connector 4.2.6.22 - Mar 24, 2024
• 4.2.6 UR3 (build 147) + Connecter 4.2.6.24 - Apr 10, 2024
• 4.2.6 UR4 (build 151) + Connecter 4.2.6.25 - Apr 24, 2024
• 4.2.6 UR5 (build 155) - May 7, 2024
• 4.2.6 UR6 (build 156) + Connector 4.2.6.26 - May 19, 2024
• 4.2.6 UR7 (build 158) - May 30, 2024
• 4.2.6 UR8 (build 161) - June 17, 2024
• 4.2.6 UR9 (build 170)   - July 3, 2024
• 4.2.6 UR10 (build 174)   - July 23, 2024
• 4.2.6 UR11 (build 179)   - August 1, 2024
• 4.2.6 UR12 (build 181) + Connecter 4.2.6.27 - August 14, 2024
• 4.2.6 UR13 (build 183) - August 24, 2024
• 4.2.6 UR14 (build 187) - August 27, 2024
• 4.2.6 UR15 (build 188) - September 17, 2024
• 4.2.6 UR16 (build 189) - September 25, 2024
• 4.2.6 UR17 (build 190) - November 14, 2024
• 4.2.6 UR18 (build 191) - November 19, 2024
• 4.2.6 UR19 (build 192) - December 02, 2024
• 4.2.6 UR20 (build 195) - December 10, 2024
• 4.2.6 UR21 (build 201) - January 11, 2025

Connector Note

4.2.6.X Connector now supports TLS 1.3.  As a result, EL6 Linux is not supported (as EL6 does not have the library for TLS 1.3).  Thus, please keep using connector 4.2.5.X or earlier for EL6 (eg: RHEL 6. X, OL 6. X, CentOS 6.X)

Pre-Requisite: Java Migration - Java 8 to Java 11

JAVA version must be upgraded from Java 8 to Java 11 for JetPatch on supported Enterprise Linux systems.  If you are already running Java 11, you can skip this step.  Check with the following command:

java -version

After completing the specified steps, your JetPatch application should be fully functional on Java 11, ensuring compatibility and security for your Linux host system. Please always verify app functionality after upgrading to ensure no issues.

For more information, please visit: Transitioning from Java 8 to Java 11  

Extended Platforms Support

Note: The new OS requires a 4.2.6 connector

Rocky Linux

• Support for Patches and Agents
  • Rocky Linux Enterprise Server 8.X
  • Rocky Linux Enterprise Server 9.X

Oracle Linux 9.X

• Support for Patches and Agents

For more information on supported Operating Systems and patching downloading techniques, please visit JetPatch Supported Platforms

Remediation Plan Improvements

Sequence Patching

Purpose: To elevate patch management strategies, Sequence Patching is introduced, aiming to address the complexity of effective enterprise patching. This innovative feature is designed to manage various patching dependencies systematically, including but not limited to dependent group patching across different stages (QA, Staging, Pre-Prod, Prod), application layer patching (DB, Backend, Frontend), cluster patching, and high-availability (H/A) server patching. By considering different thresholds and "green lights" for transitioning to subsequent phases, Sequence Patching embodies a holistic approach to managing patch workflows, ensuring a seamless and risk-managed deployment across environments.

Can be found under Patches > Sequence Patching

Key Features:

• Dependency Management: Facilitates the creation of dependencies between Remediation Plans, enabling orderly and risk-managed patch deployments.
• Automated Sequencing: Streamlines the patching process by automating sequences, reducing manual oversight and accelerating patch deployment.
• Dynamic Alerting and Success Criteria: Offers configurable success criteria and alerting mechanisms to ensure patches meet predefined standards before progressing.
• Comprehensive Support: Extends support across various patching scenarios, including high-availability servers, clusters, application layers, and prioritized patching based on criticality (e.g., security, bug fixes).

Enhanced User Experience:

• Intuitive Creation and Management: Provides a dedicated interface for the creation and management of Sequence Patching plans, enhancing user interaction and operational efficiency.
• Simplified Plan Creation: This enables users to easily define and organize patch sequences, set activation criteria, and select approval methods for each step in the patching sequence.

Operational Benefits:

• Efficient Dashboard Navigation: Incorporates new filters for swift identification and management of sequence patching plans directly from the dashboard.
• ITSM Integration: Ensures seamless integration with ITSM for enhanced ticketing processes, providing comprehensive visibility into patch management activities.
• Adaptable Approval Processes: Offers flexibility in selecting manual or automatic approval methods for each sequence step, accommodating various operational workflows

For detailed guidance and further information, visit our Sequence Patching documentation.

Remediation Plans Ticket - New Statuses & Activate Icon

Remediation Plan Statuses

To maintain uniformity and logic between the Remediation Plans statuses and their location in the Dashboard,

• ‘Pending Activation’ Changed to - Activation Required
• ‘Waiting for Execution’ Changed to - Pending Execution
• ‘Pending Configuration’ charged to - Missing Configuration
• ‘Pending cancel’  changed to - Cancellation
• 'Pending Approval' changed to - Pending ITSM Approval
• 'Rejected by User' changed to - Rejected by ITSM

Activate Icon (New)

User will be able to Activate New RPs in Status - Pending Activation, directly from the RP Ticket.

When the user presses on this Icon, a warning message will be displayed

Are you sure you want to activate the remediation plan? (YES / NO)

• YES - will activate the current RP & RP will be moved to the Pending Column
• NO - Will cancel the activation process & RP will stay in the current Status ‘Pending Activation

Patches Catalog - Make patch titles clickable and redirect to OS vendor Info

Patch titles are clickable and redirect to the User to the Operating System vendor for more information

UI/UX Improvements

Merging Screens - System Resources in One Screen

Smart Groups & Maintenance Schedule will be fully managed (CRUD & Assign) with their own Screen

Each Screen will have 2 Tabs

• Management - Will be Equal to Screen exist on ‘System’ Section
• Assignment - Will be Equal to the Screen exists on the ‘Endpoint’ Section

System - Smart Groups

System - Maintenance Schedule

Endpoint > Management > 'ACTION' Button - Add Assignments Options

When the user selects Option 'Assignments”, he will have the option to assign the Selected Endpoint to the Relevant Resources : 

• Assign Endpoints to MW
• Assign Endpoints to Smart Groups

When the User selects several Applicable Endpoints & selects the Sub Option to ‘Assign to Maintenance' / 'Assign to Smart Group,' the system will act the same as on the Dedicated Screens & the same Popup window will be displayed with ALL the same UI and functionality

Smart Groups - New Statuses & Endpoint Details

Status ‘READY’ for Smart Groups - Updates

Change Smart Groups Status - ‘READY’

• Change the Status ‘Ready’ to ‘Created’
• Display tooltip on Mouse Hover: This Smart Group was Created On JetPatch Manager, also on WSUS & Replicas (If Needed)

Change Current Filler - Status

Change Filter Title ‘Status’ to ‘Group Status’

Add New Filter - Endpoint Statuses

A dropdown list of all available Statuses (Multi-Select)

• Assigned - It will filter the table & display Smartgroups that Include Endpoints in Statuses ‘- Assigned’
• Failed - It will filter the table & display Smartgroups that Include Endpoints in Statuses ‘- Failed’
• Updating - It will filter the table & display Smartgroups that Include Endpoints in Statuses ‘- Updating’
• Table results will be filtered according to selected values (multi-select)

New Table Column - Endpoint Statuses 

The new Column will have 3 Endpoint Statuses Details :

• Assigned - Summerized the Group Endpoints in statuses ‘Assigned’
• Failed - Summerized the Group Endpoints in statuses ‘Failed’
• Updating - Summerized the Group Endpoints in statuses ‘Updating’

Clicking on the Status Number will navigate the User to Endpoint > Groups Screens filtered by the relevant ‘Smart Group’ & ‘Endpoint Status'

Endpoint > Activities - Add a 'Rerun' Button

Users will be able to rerun an activity that ended either successfully or unsuccessfully.
All this without the need to do it with a large number of clicks and switch to another screen

When the User presses the ‘Retry’ Button, the Specific Activity will be re-run. The same Task will be Re-Run Immediately (on the relevant Server / Endpoint) in this way.

Bug Fixes & Other Improvements

Enhancements / Added

• TLS 1.3 support for Windows and Linux endpoints (UR3)

• Enable / Disable Users Column (Platform Configuration > Users) is now available for AzureAD groups (UR3)

• Replaced 'Policy Manager' user title with 'JetPatch System' (UR3)

• System > Scripts > Built-In Scripts: Disabled option to change scripts (UR3)

• RP Wizard > Create Cycle: Updated Non-Applicable Smart Groups Details (UR3)

• Auto RP: Updated icon (UR3)

• Unrecognized Operating Systems displayed as 'Unidentified' (UR3)

• Table: Added column title "Actions" (UR3)

• RP Wizard > Cycle > Patch Breakdown: Title 'Missing' changed to 'Not Installed' (UR3)

• UI/UX: Operating System Families displayed as “All [OS_Name]” (UR3)

• WSUS Server: Displays warning icon 'W' when assigned to multiple Smart Groups (Unable to Patch) (UR3)

• System > Smart Group: Added CIDR filter for IP filtering (UR3)

• Patches > Remediation Plans: Pending status 'Sent for approval' updated to 'Sent for ITSM approval' (UR1)

• Aggregated Permissions and Domain Group Handling (UR1)

• Endpoints > Activities > Actions > View Details: "Task was launched date" formatted as alphanumeric date (UR3)

• Endpoint > Management: Improved performance of all CSV reports (UR3)

• Upgraded Spring Core (UR3)

• Improved connector status and error display information (UR3)

• Tomcat upgraded to 9.0.91 (UR11)

• Tomcat upgraded to 9.0.98 (UR21)

Bug Fixed

• Patches > Patches Catalog: Fixed CVE filtering issue (UR1)

• AD Enable/Disable domain user issue (UR1)

• Azure DS issue (UR1)

• System > Maintenance: "From" date now shown in maintenance schedule timezone (UR2)

• Patches > Sequence Patching: Added cancel button for 'Sequence Manual Approval' RPs (UR2)

• Endpoints > Readiness > Configure Repositories > Autocomplete: Fixed Windows issue (UR3)

• Fixed Standalone Server API POST request issue (UR3)

• Fixed agent management issue affecting AWS EC2 RedHat instances upgraded via in-place Leapp (UR3)

• Patches > Remediation Plan > Actions > Cleanup Board: Fixed error (UR4)

• ServiceNow > Maintenance Windows: Fixed Maintenance Schedule import (UR4)

• Connectors: Temporarily disabled TLS1.3 to fix Windows agent virtualization issue (UR3)

• Platform Configuration > Servers: Fixed CSV report for unmanaged endpoints (UR5)

• Platform Configuration > Servers: Fixed inability to remove standalone server (UR6)

• Platform Configuration > Settings > Email: Changes now correctly reflected (UR7)

• Solaris connector: Permission issue preventing startup fixed (UR7)

• System > Smart Groups > Management: Fixed downloading of Smart Groups (UR7)

• RP creation: Status now 'Activation Required' and activation time empty (UR7)

• Unable to restart/stop service via Azure AD credentials fixed (UR8)

• GWT > Server: Endpoint merge fails for AD fixed (UR8)

• Patches > Remediation Plan > Apply Date Filter > Actions > Download Reports: Fixed download issue (UR8)

• Endpoint > Readiness settings: Enable no longer disables unexpectedly (UR9)

• System > Smart Group > Create: SG stuck on 'Create Group' for Linux fixed (UR9)

• RP Dashboard > Action > Delete All Archive Plans: Fixed issue (UR9)

• Discovery Source: Corrected querying different AD group (UR9)

• Patches > Remediation Plans > Apply Filters > Download Reports: Fixed download issue (UR9)

• Remediation Dashboard > Filter View > ACTION > Bulk Procedure: Fixed action applied incorrectly (UR9)

• Auto RP Rules: Fixed creation and save issue without auto-activation (UR9)

• Endpoint Management > Filter Endpoints > Assign to Tag: Fixed assignment to filtered endpoints (UR10)

• Tools Catalog > Tools Discovery: Fixed empty JSON upload (UR10)

• Tools Catalog / System > Tasks & Scripts: Fixed file/script upload issue (UR10)

• Unsupported PowerShell Execution Policy exemption: Fixed for 'RemoteSigned' VMs (UR11)

• Overlapping AD group discovery fixed (UR11)

• AD group discovery count inconsistency fixed (UR12)

• Endpoint repeatedly moving between directory services during AD discovery is fixed (UR12)

• Endpoints > Management > Manage Tags: Fixed tag assignment issue (UR13)

• Maintenance Rules page: Fixed loading and query timeout issue (UR14)

• Fixed transient parameter loss, causing missing patch files (UR14)

• Logs & Alerts: Fixed redundant logging of simultaneous exemptions (UR14)

• CSRF checks for API calls under "/rest/experimental/patch-governance/" fixed (UR15)

• Minor UI issue in the inspect window fixed (UR15)

• Added method to retrieve servers filtered by specific tag or without any tags (UR16)

• Fixed NPE on VLinkNetworkEventListener (UR17)

• Maintenance Window incorrect next slot calculation fixed (UR18)

• Fixed exceptions on VLinkNetworkEventListener (UR19)

• Patches not displayed in 'Needed On' column for servers fixed (UR21)

• Removed backend OS filter to ensure environment compatibility (UR21)

• Endpoint Readiness issue caused by WUA configuration fixed (UR21)

• Fixed false values in the 'Needed On' column when filtering by Smart Groups (UR21)

• Optimized 'Get groups and computers' WSUS process, reducing DB connections and memory usage (UR21)