CloudAware provides patch monitoring and patch eligibility information. You would only need to install the Breeze agent on the machines to make this information, along with IS level data, available in Cloudaware CMDB.
CloudAware also shows what patches are outstanding, equally well for Windows and Linux. If a patch is security-related, meaning that there is a security vulnerability that has been identified with that version of the package, the checkbox is going to be checked requiring your attention.