Work around:
In Operating system deployment/Provisioning
Create Provisioning Task -> Execute File
Target path and file name: %%LDMS_LOCAL_DIR%%\..\vulscan.exe
Command-line parameters: /showui=true /AutoRebootTimeout=1- /AutoCloseTimeout=10 /PeerDownload=false /AllowUserCancelScan=false /RebootAction=Never /repair /log=c:\ldprovisioning\output.log group=500
In Patch and Compliance
Create a group under "Public custom groups" (requirement) in patch management to put all of your patches in that you want applied - I normally mirror my compliance group.
Right click the group and go to info. Take the ID: value in the top right and replace the 500 in the command-line paramters above.
This will mimic the patch from group functionality of the broken provisioning patch function.