by The Evergreen community will release new versions of both OpenSRF and Evergreen during the week of June 24 to fix security vulnerabilities.
Once they are released, all Evergreen sites are encouraged to upgrade immediately. These releases will be announced on the evergreen-general mailing list and the Evergreen blog once available.
For more information about how security bugs are reported, patched, and released, please see the security wiki page.