April 28th saw the release of the latest batch of security and performance updates for Magento. Adobe, which now owns Magento, are staying committed to the security of the platform to the agreed end of life dates. They have identified various vulnerabilities that have been patched in either 2.3.4-p2, 2.3.5 or 1.9.4.5. Which version you upgrade to depends on your current situation.
For users on Magento 2 Open Source, there are 2 options; patch version 2.3.4 up to 2.3.4-p2 (or 2.3.4.2, more familiarly) which is a security update only, or upgrade to version 2.3.5. The latter is a regular full release that we have come to expect, including security patches, performance increases and feature improvements. Commerce edition customers also have the option to move up to version 2.3.5, or 1.14.4.5 for those on the previous, enterprise Edition.
If you are not on Magento 2, Magento 1 remains supported, but only in the short term, and only for security updates. If you’ve yet to plan your switch to the fully upgraded new version, take a look at our guide on Magento 1 to 2 Migration.
There’s an important note for Magento businesses on an out of date version of Magento 2; 2.2.x reached its end of support date 31st December 2019, and 2.2.12 is only available to extended support Commerce customers.
It’s not all Security though, 2.3.5 has lots of exciting upgrades to the Magento platform. Elasctic Search 7.x is now available to supercharge your search experience, PWA (Progressive Web Apps) Studio has been upgraded to allow developers access to even more cutting-edge tools, Klarna (the payment slicer) has increased the territories it operates in, and the Tax system Vertex has been upgraded to provide a more powerful and reliable experience. There are hundreds of other improvements in the quarterly updates, they can be seen here. Be warned, it’s deep, technical stuff!
We are a Google Partner and expert Magento development agency with 20 years eCommerce experience; for any help or advice on migrating, updating, or maintaining your Magento eCommerce site, contact our team today.