Page History

...

Also you should update your release version as soon as a security update is mentioned at https://ofbiz.apache.org/download.html#vulnerabilities.
Another option is to use If you are using a release branch rather than a released package. As , as soon as the release branch contains the security update, you just have to should update ("svn up") your referent working copy, test and apply in production...

...