Patch ESXi hosts with VCSA 5.1

Hello,

I am using the VCSA 5.1 in our environment with a mixture of standard and enterprise plus ESXi 5.1 hosts.  My question is what are my options to be able to patch (apply security updates and minor upgrades) like VCUM provides in a strictly Windows environment?

Thanks