Just downloaded the latest Magento Community Edition v1.9.1.1 and the first thing that popped up when I logged into the admin was that there were important security patches. I installed SUPEE-5994 as instructed because it was released after v1.9.1.1.

Is it safe to assume that the earlier patches are already incorporated with the latest release? If not, is there a way to identify which patches need to be applied on a local development server with no public URL?

I'm confused because several patches are marked as being for version 1.9.x.


2 Answers 2


Just read the changelog:


Ok not at the moment for the current version, hopefully they fix it soon. But @benmarks confirmed, that in magento is only the patch SUPEE-5344

What I know: Magento is doing silent updates, so change the release data, without changing the version number, which is really bad if you ask me. I would assume, that the newest patch SUPEE-5994 is not part of it. But you can just try, by applying it, than patch tells you whether it is already applied (or whether it seems like it.

  • Yes. magento included that patch.no need to use patch for this version..vote +1
    – Amit Bera
    May 29, 2015 at 6:09
  • 1
    Updated my answer to make sure you see the important part :-) So called shoplift patch is in, but not the newest! May 29, 2015 at 7:00
  • which patch i have to install for 1.9.0 version..... Oct 6, 2015 at 7:36
  • Check the download page. Every patch which is available for 1.9 and is not applied yet Oct 6, 2015 at 14:32

Please visit this URL and Scan your Magento shop for known security vulnerabilities. https://www.magereport.com

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.