Hi all, I noticed that for all OFBiz vulnerabilities published this year, there are no associated commits published here: https://ofbiz.apache.org/security.html
We have some OFBiz installations where it is not always easy to quickly to migrate to the newest version. Therefore, we usually went through the associated commits and applied those to our OFBiz versions. Now without the list of associated commits, we have to go through the commit history manually and do some guesswork as to which commits are associated with the published vulnerabilities. This is not a very efficient or relieable process. Why are those associated commits no longer published, and is there any chance to have them published again? Regards, Philipp Philipp Hoppen, Software Engineer / System Engineer nowhow solutions AG, Laupenstrasse 1, CH-3008 Bern +41 (0) 31 380 00 76, www.nowhow.ch
