My current magento version is 2.3.5-p1. I want to apply the last version of security patch for the same version 2.3.5 . Whether it can be 2.3.5- p2 or 2.3.5-p5 , anything. How can i apply . Please can someone send me step by step guide. Dont send Mageplaza link, i have already refer that and did not understand anything.


3 Answers 3


The latest version of magento 2.3.5 is 2.3.5-p2.

To upgrade from 2.3.5-p1 to 2.3.5-p2, following the below steps:

  1. Run command: composer remove magento/product-community-edition --no-update && composer require magento/product-community-edition=2.3.5-p2 --no-update

  2. Run command: composer update

  3. Run commands to run upgrade database, compile DI, deploy static content: bin/magento setup:upgrade && bin/magento setup:di:compile && bin/magento s:s:d -f

That's all, you're done.

  • How did you find the latest is 2.3.5-p2? Commented Oct 6, 2022 at 9:19
  • You can find all released magento versions here: experienceleague.adobe.com/docs/commerce-operations/release/… Btw, I hope you can upgrade to 2.4 version ASSAP, at least 2.4.4 to make your site safe.
    – Tu Van
    Commented Oct 6, 2022 at 9:44
  • @TuVan You suggest that the OP should upgrade to 2.4.4, I want to know how safe it is to upgrade? Current github shows over 1000+ issues, most of which are related to Magento 2.x. Last time I tried to upgrade 2.3.7 to 2.4x` it did not turn out well. So much incompatible changes, and PHP 8. For OP and me, please advise how you would go about doing a safe upgrade from 2.3x to 2.4x without half of the things just imploding? Commented Oct 6, 2022 at 12:59
  • @CvRChameleon the github issues over 1000+ since some years ago til now...it does not mean 2.4.x is not good, and almost site was upgraded to 2.4.x. Magento 2.3 was end of support in September 8, 2022, so you only received security updates for 2.4.x (version <=2.4.3 will be end of support on November 28, 2022).
    – Tu Van
    Commented Oct 6, 2022 at 16:08
  • 1
    For a safe upgrade from 2.3x to 2.4.4, I would recommend do the upgrade on your local first and following these steps: 1. Upgrade system requirements: composer 2.1, PHP 8.1, Elasticsearch 7.16, Maria db 10.4, MySql 8.0, RabbitMQ 3.9, Redis 6.2, Varnish 7.0. 2. Run command composer remove magento/product-community-edition --no-update && composer require magento/product-community-edition=2.4.4 --no-update 3. Check the composer.json and make sure the require-dev section same as github.com/magento/magento2/blob/2.4.4/composer.json#L113 4. Run command composer update
    – Tu Van
    Commented Oct 6, 2022 at 16:31

You need to run following commands from magento root

composer remove magento/product-community-edition --no-update 
composer require magento/product-community-edition=2.3.5-p2 --no-update
composer update

Your magento security patch is applied after these


Right way of applying Security-Patch is as follows:

If you want to apply any security patch for Magento version and do not want to update the third party extension(Just want to update the Patch upgraded extensions/module) use below commands for that.

Let's apply patch p5 for 2.4.6-p4 or earlier versions of 2.4.6:

Magento Upgrade - Security Patch Upgrade

composer require magento/product-community-edition:2.4.6-p5 -W

The above command will only update the extensions related to Patch uprgade only.

NOTE: Do not run composer update command for this either it will update third party extensions too

Then you can continues with rest of commands

php bin/magento setup:upgrade
php bin/magento setup:di:compile
php bin/magento setup:static-content:deploy -f
php bin/magento cache:clean

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.