The keyword is a moving target. But by following this guide, you will always land on the correct, malware-free version.
On Classe 300 devices and touch screens, you can check the current firmware version directly in the system information or settings menu. If an update is pending, a notification is typically sent automatically to the device.
For technical planning and system design, the following desktop tools are available: