svn commit change log for security fixes

[Jen Sing Choe <je...@b2b.com.my>]

wish to ask.
is there any JIRA or any place that listed out the files patches in respect
to security fixes ?
i cant found any jira ticket.
and i have been search through svn change log (by branches) to determine
the files committed.
and there is no keywords to search for inside the commit message.

just wondering whether it is because of security concern that the security
patches cannot be listed out.

-- 
Disclaimer : This E-mail is intended only for the use of the individual or 
entity named above and may contain information that is confidential. If you 
are not the intended recipients, please immediately notify us by return 
email and delete it from your system. Any unauthorised dissemination, 
distribution or copying of this email is strictly prohibited. Thank You.

Re: svn commit change log for security fixes

[Jacques Le Roux <ja...@les7arts.com>]

No, there are any related Jira for security fixes nor keywords.
And yes it's to scramble things.
Most of the time security fixes are applied on trunk and backported to branches.
By looking here http://ofbiz.apache.org/download.html#vulnerabilities you should be able to figure it yourself
Tip: releases are tagged in branches.

HTH

Jacques

On Friday, November 22, 2013 7:47 AM Jen Sing Choe <je...@b2b.com.my> wrote:
> wish to ask.
> is there any JIRA or any place that listed out the files patches in respect
> to security fixes ?
> i cant found any jira ticket.
> and i have been search through svn change log (by branches) to determine
> the files committed.
> and there is no keywords to search for inside the commit message.
> 
> just wondering whether it is because of security concern that the security
> patches cannot be listed out.