I'm seeing it in my lab.....

Keep in mind, The "New Feed" sort of turns things on its head.  Patches are not created in the ZCC until a device reports them as needed.

OMG, we just found the same thing by accident.... actually there's no patching available for our workspace app.

Craig Wilson : Regarding the picture - I'm wondering about the Vendor ID ( Receiver 4.0...), maybe theres something wrong in detection? Nice to see being able to update/upgrade Receiver to Workspace App, but we're using the app for a long time and in the past it worked well to upgrade those... Right now no client detects the and there should be a few thousand devices

Even worse: Our basic package is somewhat old ( version 19.5 ) but it wasn't a big deal because ZPM upgraded it in the past ( to 22.3 ) , right now new machines will stay with the old one ( of course we're going to fix this.... )

Best Regards

DIrk

Actually with more Digging, it does look like it is no longer available for patching.

The reason is more legal technicalities than technical ones.  The official download link for the latest version is...

https://www.citrix.com/downloads/workspace-app/windows/workspace-app-for-windows-latest.html?24.5.0.131

Clicking the download link you get a license agreement you must accept.....This prevents much of the automated background processes.

For now, you can use a bundle instead of ZPM to ensure you have the latest....and then update it as new ones come out.

There are hopes to be able to add a feature to ZPM to allow admins to provide a custom download URL so they can manually obtain the patch and provide and alternate download source.  Exact details are still to be determined, but the feature may be in ZCM 25.2. (Note: Edited from Saying 24.2, which was my intent)  

(Note: ZCM 24.4 will be a quick release after 24.2 to get ZCM back on schedule for Early Q2/Q4 releases.)

The OEM feed still has the ability to scan/detect such patches as needed, but due to the inability to remediate them they are not actually enabled and flagged as disabled.

Note: I hope to get something out as a "Cool Solution" to help automate this as much as possible via ZCM....

Thanks for the clarification, Craig! Glad to know I wasn't going crazy or something was wrong with our environment. I know we spoke directly regarding the coincidental timing of NVD being down so glad to have it cleared up. We had already pushed via regular bundle in the meantime successfully. 

Yeah, thanks to Craig for clarification and also a thanks to you for creating this thread (!)

Thanks for the info Craig. I have a customer who would welcome a potential automation solution with open arms. Without automation, the client is not compliant against potential security breaches, which of course the CISO does not like at all. 

I believe Citrix Workspace has a built-in automatic update feature but otherwise would need to push via a software bundle (which is what we do so we can control versions.)