No, there are any related Jira for security fixes nor keywords.
And yes it's to scramble things.
Most of the time security fixes are applied on trunk and backported to branches.
By looking here http://ofbiz.apache.org/download.html#vulnerabilities you 
should be able to figure it yourself
Tip: releases are tagged in branches.

HTH

Jacques

On Friday, November 22, 2013 7:47 AM Jen Sing Choe <jensing.c...@b2b.com.my> 
wrote:
> wish to ask.
> is there any JIRA or any place that listed out the files patches in respect
> to security fixes ?
> i cant found any jira ticket.
> and i have been search through svn change log (by branches) to determine
> the files committed.
> and there is no keywords to search for inside the commit message.
> 
> just wondering whether it is because of security concern that the security
> patches cannot be listed out.

Reply via email to