No, there are any related Jira for security fixes nor keywords.
And yes it's to scramble things.
Most of the time security fixes are applied on trunk and backported to branches.
By looking here
http://ofbiz.apache.org/download.html#vulnerabilities you should be able to figure it yourself
Tip: releases are tagged in branches.
HTH
Jacques
On Friday, November 22, 2013 7:47 AM Jen Sing Choe <
[hidden email]> wrote:
> wish to ask.
> is there any JIRA or any place that listed out the files patches in respect
> to security fixes ?
> i cant found any jira ticket.
> and i have been search through svn change log (by branches) to determine
> the files committed.
> and there is no keywords to search for inside the commit message.
>
> just wondering whether it is because of security concern that the security
> patches cannot be listed out.