The best way to keep your installation of Liferay Portal secure is to always use the latest release - currently Liferay Portal 7.3 GA1. However, we’ve been hearing from you in the community that using the latest release can be challenging, especially if you need to upgrade from one major version to another. So, to make it easier to keep your Liferay Portal instance secure, the Community Security Team will periodically release source patches for the last GA release of each major version. For example, patches will be released for 7.1 GA4 and 7.0 GA7. For more information on working with patches, please see Patching Liferay Portal.

The first set of patches will include patches for Liferay Portal 6.2 GA6, 7.0 GA7 and 7.1 GA4. All vulnerabilities fixed in these patches have already been fixed in Liferay Portal 7.2 GA2. We plan on releasing the patch on March 18 and we hope this notice will give you some time to prepare if you and your organization need a bit of time to prepare.