Just downloaded the latest Magento Community Edition v1.9.1.1 and the first thing that popped up when I logged into the admin was that there were important security patches. I installed SUPEE-5994 as instructed because it was released after v1.9.1.1.

Is it safe to assume that the earlier patches are already incorporated with the latest release? If not, is there a way to identify which patches need to be applied on a local development server with no public URL?

I'm confused because several patches are marked as being for version 1.9.x.


Just read the changelog:


Ok not at the moment for the current version, hopefully they fix it soon. But @benmarks confirmed, that in magento is only the patch SUPEE-5344

What I know: Magento is doing silent updates, so change the release data, without changing the version number, which is really bad if you ask me. I would assume, that the newest patch SUPEE-5994 is not part of it. But you can just try, by applying it, than patch tells you whether it is already applied (or whether it seems like it.

  • Yes. magento included that patch.no need to use patch for this version..vote +1 – Amit Bera May 29 '15 at 6:09
  • 1
    Updated my answer to make sure you see the important part :-) So called shoplift patch is in, but not the newest! – Fabian Blechschmidt May 29 '15 at 7:00
  • which patch i have to install for 1.9.0 version..... – Baby in Magento Oct 6 '15 at 7:36
  • Check the download page. Every patch which is available for 1.9 and is not applied yet – Fabian Blechschmidt Oct 6 '15 at 14:32

Please visit this URL and Scan your Magento shop for known security vulnerabilities. https://www.magereport.com

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.