No, there are any related Jira for security fixes nor keywords.
And yes it's to scramble things.
Most of the time security fixes are applied on trunk and backported to branches.
By looking here http://ofbiz.apache.org/download.html#vulnerabilities you
should be able to figure it yourself
Tip: rele
wish to ask.
is there any JIRA or any place that listed out the files patches in respect
to security fixes ?
i cant found any jira ticket.
and i have been search through svn change log (by branches) to determine
the files committed.
and there is no keywords to search for inside the commit message.