You can apply VMware Live Site Recovery security updates and patches as they are made available by VMware.
The VMware Live Site Recovery virtual appliance uses VMware Photon OS 4.0 as the guest operating system.
Applying VMware Live Site Recovery Patches and Security Updates to the VMware Live Site Recovery Virtual Appliance
You apply VMware Live Site Recovery security patches and updates by performing an update of your existing VMware Live Site Recovery Virtual Appliance installation. For information about updating the VMware Live Site Recovery Virtual Appliance, see the Update the Site Recovery Manager Virtual Appliance topic in VMware Live Site Recovery Installation and Configuration.