I have several Magento installations, that I manage on behalf of our clients. We already patched the vulnerabilities, but the warnings keep rolling in. We just received the third warning on all sites.
We have two different versions deployed: 126.96.36.199 and 188.8.131.52.
When I patched the 1.9 version, I got some warnings, but I verified that the patch was applied, by checking the 'diff' in the sh file against the actual code. Also, I could not apply the SUPEE-1533 patch, since the changes were already made in 184.108.40.206. I found elsewhere that the patch is only for 220.127.116.11. Only SUPEE-5344 figures in my /app/etc/applied.patches.list
On 18.104.22.168 it's another problem. I did manage to apply both patches, but the SUPEE-5344 is called SUPEE-5345 instead..
The warnings keep rolling in, and the clients are complaining about them. It looks like we didn't apply the security patches, which we did.
Also: the naming of the patches are a bit .. unfortunate. The SUPEE-5344 and SUPEE-5345 are named for their Enterprise versions: EE_22.214.171.124 and EE_126.96.36.199, even though I downloaded the Community version of the patch...
Did I miss something, when I installed the patches? Will the warnings stop appearing if I have the correct patch names in applied.patches.list?