We have done this in the past by Checking-In the Package to the Evaluation Branch, and deploy this version either using system tree location or Tags to your Test Workbench, and when you are happy you can change the branch to the "Current Branch" and your existing deployment tasks will push this version.
You may have to edit Configuration>Server Settings>Repository Packages>Allow package check-in for any repository branch: set to "Yes"
Is there a way deploying the patch with systems in production for example which have similar system/tag names?
If all the systems are in the same part of the system tree independantly you could create a Deployment task for that part of the system tree, or create a task on a machine by machine basis.
According to :McAfee Patches cannot be deployed from either the Previous or Evaluation Branch
Corporate KnowledgeBase ID: KB53025
You cannot deploy patches from the evaluation branch unless you have McAfee Agent 4.5 Patch 1 installed.