You will be able to achieve this using tags and branches.
You will need to check Patch 2 into the previous branch of the Mater Repository and Patch 4 into your current branch.
Create a McAfee Agent deployment client task for each patch.
Create a Tag for each Patch install for example "Deploy VSE 8.8 patch 2" and "Deploy VSE patch 4"
In the client task assignment on the firsts teen at the bottom, use the tag filer to apply the client task, and on the second step Run Immediatly.
Then tag your systems with the corresponding task and run an Agent Wake Up.
It might also be worth on the Patch 2 install task to use the 'Does not have tag' and see this to the "Deploy VSE patch 4" to prevent the Patch 4 client task from running by accident on machines with the Patch 2 tag.
McAfee Volunteer Moderator
Certified McAfee Product Specialist - ePO