Download Release, Patches and Tools
For Magento Open Source 2.x and 1.x
Download with Composer
For the first time, the Magento software uses Composer for dependency management. This provides a better overall in-app experience and improved ability to manage processes such as upgrading or managing Magento and third-party components (modules, themes, languages). Learn how to download Magento using Composer.
Full Release (ZIP with no Sample Data)
-Added January 28, 2020
Magento Open Source 2.3.4 includes over 150 functional fixes to the core product, 32 security enhancements, and the resolution of over 275 issues by our community members. This release includes framework enhancements and performance improvements. Custom layout updates have been removed, and layout updates have been deprecated. We strongly recommend that all merchants upgrade as soon as possible. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.4 Release Notes for more information.
-Added October 8, 2019
Patch 2.3.2-p2 is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.3.2. Merchants can install these time-sensitive security fixes to keep their site up-to-date with the most recent security fixes without applying the hundreds of functional fixes and enhancements that the full quarterly release (Magento 2.3.3) provides.
You must deploy Magento 2.3.2 before applying this patch. Installation information can be found in the discussion of security patches here.
-Added January 28, 2020
Magento Open Source 2.2.11 includes critical security enhancements and 19 core code fixes and improvements. This release is the last release of the 2.2.x product line that will contain functional fixes. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.11 Release Notes for more information.
Full Release with Sample Data
-Added January 28, 2020
Magento Open Source 2.3.4 includes over 150 functional fixes to the core product, 32 security enhancements, and the resolution of over 275 issues by our community members. This release includes framework enhancements and performance improvements. Custom layout updates have been removed, and layout updates have been deprecated. We strongly recommend that all merchants upgrade as soon as possible. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.4 Release Notes for more information.
-Added January 28, 2020
Magento Open Source 2.2.11 includes critical security enhancements and 19 core code fixes and improvements. This release is the last release of the 2.2.x product line that will contain functional fixes. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.11 Release Notes for more information.
Magento 1 to Magento 2 Migration Tools
We’ve developed migration tools to assist you with moving from Magento 1 to Magento 2.
The Magento 2
Data Migration Tool helps you efficiently port all of your key product, customer, and order data, store configurations, promotions and more to from Magento 1 to Magento 2. To learn more about it, see the Data Migration Guide .
The Magento 2
Code Migration Tool enables you to port some of your customizations from Magento 1 to Magento 2. Because of the differences between the two platforms, some additional coding is required. To learn more about it, see the
README.
Magento Open Source Patches - 2.x
-Added March 24, 2020
This patch addresses a lingering issue created by the fix for CVE-2019-8118 (PRODSECBUG-2452) included in Magento 2.3.3 and 2.2.10.
While the fix for that bug stopped the logging of failed login attempts, information collected prior to updating to these current versions may still exist, and previous, unpatched versions of Magento may still have this issue. This patch clears the login attempts that were previously collected. See Remove failed login attempts from the database for information on how to download and install this patch.-Added February 12, 2020
This patch resolves the issue which affects orders placed with PayPal Express Checkout where the order’s shipping address specifies a country region that has been manually entered into the text field rather than selected from the drop-down menu on the Shipping page.
Affected Magento versions: Magento Commerce and Open Source v2.3.4 (on prem and cloud).
See Applying patches for specific instructions on downloading and applying Magento patches.
This patch resolves issues that users of Magento 2.3.3 experience in deployments where Elasticsearch 6.x is used as the catalog search engine. Users who attempt to navigate past the first page of search results are unsuccessful, and Magento displays an error message. After this patch is installed, users will be able to page through all search results.
Affected Magento versions: Magento Commerce and Open Source v2.3.3 (on Prem and Cloud).
This patch addresses backward compatibility issues that extension developers may have experienced after the introduction of Magento\Framework\Mail\EmailMessageInterface, which was released in Magento 2.3.3. In the scope of this patch, the new EmailMessageInterface inherits from the old MessageInterface, and core modules are changed back to rely on MessageInterface.
Merchants should apply this patch as soon as possible, especially if their deployments include extensions or customizations that use the mail interface.
Affected Magento versions: Magento Commerce and Open Source v2.3.3.
See the Magento forum DevBlog post for much more information.
This patch addresses changes that were introduced in Magento 2.3.3 that resulted in problems with extensions and customizations of the product collection feature that rely on method chaining contracts.
The addAttributeToFilter method (in file app/code/Magento/Catalog/Model/ResourceModel/Product/Collection.php) was refactored without a return statement, which broke the method-chaining that is used extensively in customizations of this feature. This patch refactors the method to add the missing return statement and ensure that method chaining works.
An unauthenticated cross-site scripting vulnerability combined with an authenticated Phar deserialization vulnerability has left older versions of Magento Commerce and Magento Open Source open to serious exploit. An attacker can use these vulnerabilities to inject JavaScript into the Magento Admin, and subsequently launch malicious code in a store user’s browser. We strongly recommend that all users of the affected versions of Magento download and apply the appropriate patch as soon as possible.
The issue affects the following Magento versions (on prem and cloud):
- Magento Open Source v2.3.1, 2.3.0, 2.2.8, and earlier 2.2.x releases
- Magento Commerce v2.3.1, 2.3.0, 2.2.8, and earlier 2.2.x releases
- Magento Commerce Cloud v2.3.1, 2.3.0, 2.2.8, and earlier 2.2.x releases
This patch resolves an issue with the Async and Bulk APIs, which in certain versions of Magento do not provide the information needed to update or create data for specific stores. Without this patch, the Async/Bulk REST APIs will support the default store view scope only.
Affected Magento versions are: Magento Open Source v2.3.2, 2.3.1
An issue has been discovered in Magento Open Source and Magento Commerce that can be used to disclose the URL location of a Magento Admin panel. While there is currently no reason to believe this issue would lead to a compromise directly, knowing the URL location could make it easier to automate attacks. To help prevent against potential attacks, Magento has released patches for this issue. For complete details, install instructions, and recommendations, see: https://magento.com/security/security-update-potential-vulnerability-magento-admin-url-location
This patch provides a replacement for the deprecated Google Image Charts service that Magento uses for all 2.x instances and replaces it with the Image-Charts free service. Users of Magento 2.x deployments will not be able to view static charts in Magento 2.x instances unless they download and apply this patch. See Switch from deprecated Google Image Charts to Image-Charts for Magento for more information.
This patch provides protection against the SQL injection vulnerability described under PRODSECBUG-2198 here. To quickly protect your store from this vulnerability only, install this patch. However, to apply protection against this vulnerability and others, you must apply the 2.3.1, 2.2.8, or 2.1.17 patch code. We strongly suggest that you install these full patches as soon as you can
This patch updates Authorize.Net Direct Post integration to continue processing payments beyond March 14th 2019 (see MD5 Hash End of Life & Signature Key Replacement). There are additional steps that you need to execute after installing this patch to ensure continued use of Authorize.Net – read more Update Authorize.Net Direct Post from MD5 to SHA-512.
Full Release - ver 2.0.x (ZIP with no sample data)
Learn more about Magento Open Source 2.0 in the User Guide »
-Added October 8, 2019
Magento Open Source 2.3.3 includes over 170 functional fixes to the core product and 75 security enhancements. This release provides support for PHP 7.3.x in additional to PHP 7.2.x. It also introduces PSD2 compliance for core payment methods and the deprecation of the non-PSD2-compliant Cybersource and eWay payment modules. Varnish support for v6.2.0 has been added. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.3 Release Notes for much more information.
-Added October 8, 2019
Patch 2.3.2-p2 is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.3.2. Merchants can install these time-sensitive security fixes to keep their site up-to-date with the most recent security fixes without applying the hundreds of functional fixes and enhancements that the full quarterly release (Magento 2.3.3) provides.
You must deploy Magento 2.3.2 before applying this patch. Installation information can be found in the discussion of security patches here.
-Added June 25, 2019
Magento Open Source 2.3.2 includes over 200 functional fixes to the core product, over 350 community-submitted pull requests, and 75 critical security enhancements. Merchants will appreciate the improvements to storefront page response times. This release also includes substantial infrastructure improvements. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.2 Release Notes for much more information.
-Added March 26, 2019
Magento Open Source 2.3.1 offers significant new tools for both merchants and developers as well as over 30 core security improvements. Merchants will appreciate the improved Admin order creation workflow. This release also provides support for Elasticsearch 6.0, a new Authorize.Net extension to replace the Authorize.Net Direct Post module, and enhancements to Progressive Web Apps (PWA) Studio and GraphQL. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.1 Release Notes for much more information.
-Added November 28, 2018
Magento Open Source 2.3.0 offers significant new tools for both merchants and developers as well as over 30 core security improvements. Inventory Management and many CMS enhancements support merchant efforts. Developers will benefit from the new PWA (progressive web applications) tool suite, declarative schema, GraphQL API, asynchronous web APIs, bulk web APIs, and updates to Magento’s tech stack, including compatibility with PHP 7.2. Community contributions to this release are substantial — both overall code quality and special new features such as Inventory Management and bulk APIs. See Magento Open Source 2.3 Release Notes for much more information.
-Added October 8, 2019
Magento Open Source 2.2.10 includes 75 critical security enhancements, 147 core code fixes and improvements, and community-submitted fixes to 56 GitHub issues. This release provides support for PHP 7.2.x. It also introduces PSD2 compliance for core payment methods and the deprecation of the non-PSD2-compliant Cybersource and eWay payment modules. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.10 Release Notes for more information.
-Added June 25, 2019
We are pleased to present Magento Open Source 2.2.9. This release includes 75 critical security enhancements, over 100 core code fixes and improvements, and over 200 community-submitted pull requests. This release also includes substantial infrastructure improvements, including the new Google reCAPTCHA module for PayPal Payflow Pro. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.9 Release Notes for more information.
-Added March 26, 2019
We are pleased to present Magento Open Source 2.2.8. This release addresses critical security issues that include cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities. Functional enhancements include support for Elasticsearch 6.0 and improved order creation workflow in the Admin. Check out the 250+ community contributions, too! We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.8 Release Notes for more information.
-Added November 27, 2018
We are pleased to present Magento Open Source 2.2.7. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes include enhancements that focus on wish list and shipping features.
Check out the 150+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.7 Release Notes for more information.
-Added September 18, 2018
We are pleased to present Magento Open Source 2.2.6. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes include performance-tuning enhancements that focus on catalog indexing and improvements to the reliability and ease of the checkout process. Check out the 350+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.6 Release Notes for more information.
-Added June 27, 2018
We are pleased to present Magento Open Source 2.2.5. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes contain substantial improvements to indexing performance, performance-tuning, and enhancements to Magento Shipping. Check out the 90+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.5 Release Notes for more information.
-Added May 2, 2018
We are pleased to present Magento Open Source 2.2.4. This release includes significant new bundled extensions (Amazon Pay, Vertex, Klarna), multiple enhancements to Magento Shipping and dotmailer, and performance improvements that enable faster shopping with image loading and optimized search performance. The 200+ community contributions include many functional fixes and performance-tuning enhancements, too. See Magento Open Source 2.2.4 Release Notes for more information.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.2.3. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. And thanks to our community members, it also includes support for Elasticsearch 5.0.x and enhancements to ACL control for cache management through Magento Admin. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.3 Release Notes for more information.
-Added Dec 12, 2017
We are pleased to present Magento Open Source 2.2.2. This release introduces our new streamlined Instant Purchase option, integrated dotmailer marketing automation software, and Magento Shipping, which provides provides integrated advanced multi-carrier shipping and fulfillment. It also includes numerous functional fixes and enhancements plus a substantial number of contributions from the wider Magento community. See Magento Open Source 2.2.2 Release Notes for more information.
- Added Nov 7, 2017
We are pleased to present Magento Open Source 2.2.1. This release includes critical enhancements to the security of your Magento software and multiple functional fixes. This release also includes integrated Signifyd fraud protection. Check out the many community contributions! See http://devdocs.magento.com/guides/v2.2/release-notes/ReleaseNotes2.2.1CE.html for more information.
We are pleased to present Magento Open Source 2.2.0 GA. This release includes hundreds of functional fixes plus a wealth of new features: a bundled extension, upgraded technology stack, performance gains from improvements in indexing, cart, and cache operation, and significant enhancements in platform security and developer experience. And check out the many community contributions! See Magento Open Source 2.2.0 Release Notes for more information.
-Added June 25, 2019
We are pleased to present Magento Open Source 2.1.18. This release includes 75 critical enhancements to the security of your Magento software. This is the last supported release of the Magento 2.1.x product line. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.18 Release Notes for more information.
-Added March 26, 2019
We are pleased to present Magento Open Source 2.1.17. This release addresses critical security issues that include cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.17 Release Notes for more information.
-Added November 27, 2018
We are pleased to present Magento Open Source 2.1.16. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. This release also provides support for PHP 7.1. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.16 Release Notes for more information.
-Added September 18, 2018
We are pleased to present Magento Open Source 2.1.15. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.15 Release Notes for more information.
-Added June 27, 2018
We are pleased to present Magento Open Source 2.1.14. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.14 Release Notes for more information.
-Added May 2, 2018
We are pleased to present Magento Open Source 2.1.13. This release includes over 60 bug fixes and enhancements. See Magento Open Source 2.1.13 Release Notes for more information.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.1.12. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.12 Release Notes for more information.
-Added Dec 12, 2017
We are pleased to present Magento Open Source 2.1.11. This release includes support for the Indian Rupee (INR) in PayPal Express Checkout and new commands and functionality for the command-line interface. It also includes many functional features plus a substantial number of contributions from the wider Magento community. See Magento Open Source 2.1.11 Release Notes for more information.
-Added Nov 7, 2017
We are pleased to present Magento Open Source 2.1.10. This release includes critical enhancements to the security of your Magento software and over 40 functional enhancements, including multiple community-submitted enhancements and pull requests. We strongly recommend that all merchants upgrade to this version as soon as possible. See http://devdocs.magento.com/guides/v2.1/release-notes/ReleaseNotes2.1.10CE.html for more information.
We are pleased to present Magento Open Source (formerly Community Edition) 2.1.9. This release includes critical enhancements to the security of your Magento software. It also provides support for the change to the USPS API that USPS implemented on September 1, 2017, and a fix for a critical exception logging issue. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento Open Source 2.1.9 Release Notes for more information.
We are pleased to present Magento Open Source 2.1.8 (formerly Community Edition). This release contains over 100 enhancements and functional updates that address static content deployment, mass action deployment optimization, cache tuning, and other enhancements. See Magento Open Source 2.1.8 Release Notes for more information.
We are pleased to present Magento Community Edition 2.1.7. This release contains over 15 security enhancements and updates that address image resizing and MasterCard BIN number expansion. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento 2.1.7 CE Release Notes for more information.
We are pleased to present Magento Community Edition 2.1.6. This release includes important performance enhancements for your Magento installation, especially for operations that involve the category page as well as image resizing. See Magento 2.1.6 CE Release Notes for more information.
We are pleased to present Magento Community Edition 2.1.5. This release updates the copyright date in every file. It does not contain any functional changes or security improvements. See Magento 2.1.5 CE Release Notes for more information.
Magento Community Edition 2.1.4 includes over 20 functional fixes as well as an important security-related enhancement. See Magento 2.1.4 CE Release Notes for more information.
Magento Community Edition 2.1.3 contains over 90 functional fixes as well as important enhancements to configurable product management. These features are described in Magento 2.1.3 CE Release Notes.
Magento Community Edition 2.1.2 includes security enhancements, functional fixes, and important enhancements to the Sales API. It is compatible with MySQL 5.7, and introduces support for PHP 7.0.4 and 5.6.5. See Magento2.1.2 CE Release Notes for more information.
Magento Community Edition 2.1.1 improves storefront performance when using many configurable product variations, and addresses upgrade and installation issues. You can learn more in the Magento 2.1.1 CE Release Notes.
We are pleased to present Magento Community Edition 2.1.0 GA. This release includes many functional fixes and security enhancements, plus new features that include significant interface enhancements. See Magento2.1.0 CE Release Notes for more information.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.0.18. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.0.18 Release Notes for more information.
-Added Nov 7th 2017
We are pleased to present Magento Open Source 2.0.17. This release includes critical enhancements to the security of your Magento software, and over 40 functional enhancements., including multiple community-submitted enhancements and pull requests. We strongly recommend that all merchants upgrade to this version as soon as possible. See http://devdocs.magento.com/guides/v2.0/release-notes/ReleaseNotes2.0.17CE.html for more information.
We are pleased to present Magento Open Source (formerly Community Edition) 2.0.16. This release includes critical enhancements to the security of your Magento software. It also provides support for the change to the USPS API that USPS implemented on September 1, 2017. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento Open Source 2.0.16 Release Notes for more information.
We are pleased to present Magento Community Edition 2.0.15. This release includes only one enhancement: Support for changes in PayPal’s Instant Payment Notification (IPN) service. It does not contain any additional functional changes. See Magento 2.0.15 CE Release Notes for more information.
We are pleased to present Magento Community Edition 2.0.14. This release contains over 15 security enhancements and an update that supports MasterCard BIN number expansion. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento 2.0.14 CE Release Notes for more information.
We are pleased to present Magento Community Edition 2.0.13. This release updates the copyright date in every file. It does not contain any functional changes or security improvements. See Magento 2.0.13 CE Release Notes for more information.
Magento Community Edition 2.0.12 includes over 20 functional fixes as well as an important security-related enhancement. See Magento 2.0.12 CE Release Notes for more information.
Magento Community Edition 2.0.11 contains over 70 functional fixes as well as important enhancements to configurable product management. These features are described in Magento 2.0.11 CE Release Notes.
Magento Community Edition 2.0.10 includes security enhancements, functional fixes, and important enhancements to the Sales API. It is compatible with MySQL 5.7. These features are described in Magento 2.0.10 CE Release Notes.
We are pleased to present Magento Community Edition 2.0.9. This release focuses on functional fixes that address price and tax calculations in the shopping cart and product display in the mini cart, among other features. These fixes are described in the Magento 2.0.9 CE Release Notes.
Magento Community Edition 2.0.8 includes installation, product creation and other fixes, which are described in the Magento 2.0.8 CE Release Notes.
We are pleased to present Magento Community Edition 2.0.7. This release includes one functional fix, which is described in the Magento 2.0.7 CE Release Notes.
Magento Community Edition 2.0.6 includes multiple functional fixes and both functional and security enhancements, which are described in the Magento 2.0.6 CE Release Notes . Functional features include the ability to use Redis for session storage and a change to our default file permissions strategy that provides a more flexible way to set file ownership and permissions. For information on security issues, see Magento Security Center.
Magento Community Edition 2.0.5 contains multiple functional enhancements, including improvements to the database, product data import/export, application installation, and several other features, which are described in the Release Notes.
Release 2.0.4 includes multiple functional fixes and performance enhancements, which are described in the Magento 2.0.4 CE Release Notes . It also addresses several security issues. For information on these security issues, see Magento Security Center.
Release 2.0.2 resolves issues that some users encountered while upgrading from Magento 2.0.0 to Magento 2.0.1. You can find more information in the Release Notes.
Magento 2.0.1 CE is not available for download. If you have already installed 2.0.1, please see technical bulletin Issues upgrading to 2.0.1 (Jan. 28, 2016) for more information. If you are installing Magento 2.0 for the first time, please download Magento 2.0.2.
Magento 2.0.0 CE is not available for download. If you have already installed 2.0.0, please see technical bulletin Issues upgrading to 2.0.1 (Jan. 28, 2016) for more information. If you are installing Magento 2.0 for the first time, please download Magento 2.0.2.
Full Release with Sample Data - ver 2.0.x (ZIP with sample data)
Learn more about Magento Open Source 2.0 in the User Guide »
-Added October 8, 2019
Magento Open Source 2.3.3 includes over 170 functional fixes to the core product and 75 security enhancements. This release provides support for PHP 7.3.x in additional to PHP 7.2.x. It also introduces PSD2 compliance for core payment methods and the deprecation of the non-PSD2-compliant Cybersource and eWay payment modules. Varnish support for v6.2.0 has been added. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.3 Release Notes for much more information.
-Added October 8, 2019
Patch 2.3.2-p2 is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.3.2. Merchants can install these time-sensitive security fixes to keep their site up-to-date with the most recent security fixes without applying the hundreds of functional fixes and enhancements that the full quarterly release (Magento 2.3.3) provides.
You must deploy Magento 2.3.2 before applying this patch. Installation information can be found in the discussion of security patches here.
-Added June 25, 2019
Magento Open Source 2.3.2 includes over 200 functional fixes to the core product, over 350 community-submitted pull requests, and 75 critical security enhancements. Merchants will appreciate the improvements to storefront page response times. This release also includes substantial infrastructure improvements. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.2 Release Notes for much more information.
-Added March 26, 2019
Magento Open Source 2.3.1 offers significant new tools for both merchants and developers as well as over 30 core security improvements. Merchants will appreciate the improved Admin order creation workflow. This release also provides support for Elasticsearch 6.0, a new Authorize.Net extension to replace the Authorize.Net Direct Post module, and enhancements to Progressive Web Apps (PWA) Studio and GraphQL. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.3.1 Release Notes for much more information.
-Added November 28, 2018
Magento Open Source 2.3.0 offers significant new tools for both merchants and developers as well as over 30 core security improvements. Inventory Management and many CMS enhancements support merchant efforts. Developers will benefit from the new PWA (progressive web applications) tool suite, declarative schema, GraphQL API, asynchronous web APIs, bulk web APIs, and updates to Magento’s tech stack, including compatibility with PHP 7.2. Community contributions to this release are substantial — both overall code quality and special new features such as Inventory Management and bulk APIs. See Magento Open Source 2.3 Release Notes for much more information.
-Added October 8, 2019
Magento Open Source 2.2.10 includes 75 critical security enhancements, 147 core code fixes and improvements, and community-submitted fixes to 56 GitHub issues. This release provides support for PHP 7.2.x. It also introduces PSD2 compliance for core payment methods and the deprecation of the non-PSD2-compliant Cybersource and eWay payment modules. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.10 Release Notes for more information.
-Added June 25, 2019
We are pleased to present Magento Open Source 2.2.9. This release includes 75 critical security enhancements, over 100 core code fixes and improvements, and over 200 community-submitted pull requests. This release also includes substantial infrastructure improvements, including the new Google reCAPTCHA module for PayPal Payflow Pro. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.9 Release Notes for more information.
-Added March 26, 2019
We are pleased to present Magento Open Source 2.2.8. This release addresses critical security issues that include cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities. Functional enhancements include support for Elasticsearch 6.0 and improved order creation workflow in the Admin. Check out the 250+ community contributions, too! We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.8 Release Notes for more information.
-Added November 27, 2018
We are pleased to present Magento Open Source 2.2.7. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes include enhancements that focus on wish list and shipping features.
Check out the 150+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.7 Release Notes for more information.
-Added September 18, 2018
We are pleased to present Magento Open Source 2.2.6. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes include performance-tuning enhancements that focus on catalog indexing and improvements to the reliability and ease of the checkout process. Check out the 350+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.6 Release Notes for more information.
-Added June 27, 2018
We are pleased to present Magento Open Source 2.2.5. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. Functional fixes contain substantial improvements to indexing performance, performance-tuning, and enhancements to Magento Shipping. Check out the 90+ community contributions, too. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.5 Release Notes for more information.
-Added May 2, 2018
We are pleased to present Magento Open Source 2.2.4. This release includes significant new bundled extensions (Amazon Pay, Vertex, Klarna), multiple enhancements to Magento Shipping and dotmailer, and performance improvements that enable faster shopping with image loading and optimized search performance. The 200+ community contributions include many functional fixes and performance-tuning enhancements, too. See Magento Open Source 2.2.4 Release Notes for more information.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.2.3. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. And thanks to our community members, it also includes support for Elasticsearch 5.0.x and enhancements to ACL control for cache management through Magento Admin. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.2.3 Release Notes for more information.
-Added Dec 12, 2017
We are pleased to present Magento Open Source 2.2.2. This release introduces our new streamlined Instant Purchase option, integrated dotmailer marketing automation software, and Magento Shipping, which provides provides integrated advanced multi-carrier shipping and fulfillment. It also includes numerous functional fixes and enhancements plus a substantial number of contributions from the wider Magento community. See Magento Open Source 2.2.2 Release Notes for more information.
Added Nov 7, 2017
We are pleased to present Magento Open Source 2.2.1. This release includes critical enhancements to the security of your Magento software and multiple functional fixes. This release also includes integrated Signifyd fraud protection. Check out the many community contributions! See http://devdocs.magento.com/guides/v2.2/release-notes/ReleaseNotes2.2.1CE.html for more information.
We are pleased to present Magento Open Source 2.2.0 GA. This release includes hundreds of functional fixes plus a wealth of new features: a bundled extension, upgraded technology stack, performance gains from improvements in indexing, cart, and cache operation, and significant enhancements in platform security and developer experience. And check out the many community contributions! See Magento Open Source 2.2.0 Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
-Added June 25, 2019
We are pleased to present Magento Open Source 2.1.18. This release includes 75 critical enhancements to the security of your Magento software. This is the last supported release of the Magento 2.1.x product line. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.18 Release Notes for more information.
-Added March 26, 2019
We are pleased to present Magento Open Source 2.1.17. This release addresses critical security issues that include cross-site scripting, arbitrary code execution, and sensitive data disclosure vulnerabilities. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.17 Release Notes for more information.
-Added November 27, 2018
We are pleased to present Magento Open Source 2.1.16. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. This release also provides support for PHP 7.1. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.16 Release Notes for more information.
-Added September 18, 2018
We are pleased to present Magento Open Source 2.1.15. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.15 Release Notes for more information.
-Added June 27, 2018
We are pleased to present Magento Open Source 2.1.14. This release addresses critical security issues that include remote code execution, cross-site scripting, and cross-site request forgery issues. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.14 Release Notes for more information.
-Added May 2, 2018
We are pleased to present Magento Open Source 2.1.13. This release includes over 60 bug fixes and enhancements. See Magento Open Source 2.1.13 Release Notes for more information.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.1.12. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.1.12 Release Notes for more information.
-Added Dec 12, 2017
We are pleased to present Magento Open Source 2.1.11. This release includes support for the Indian Rupee (INR) in PayPal Express Checkout and new commands and functionality for the command-line interface. It also includes many functional features plus a substantial number of contributions from the wider Magento community. See Magento Open Source 2.1.11 Release Notes for more information.
-Added Nov 7, 2017
We are pleased to present Magento Open Source 2.1.10. This release includes critical enhancements to the security of your Magento software and over 40 functional enhancements, including multiple community-submitted enhancements and pull requests. We strongly recommend that all merchants upgrade to this version as soon as possible. See http://devdocs.magento.com/guides/v2.1/release-notes/ReleaseNotes2.1.10CE.html for more information.
We are pleased to present Magento Open Source (formerly Community Edition) 2.1.9. This release includes critical enhancements to the security of your Magento software. It also provides support for the change to the USPS API that USPS implemented on September 1, 2017, and a fix for a critical exception logging issue. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento Open Source 2.1.9 Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Open Source 2.1.8 (formerly Community Edition). This release contains over 100 enhancements and functional updates that address static content deployment, mass action deployment optimization, cache tuning, and other enhancements. See Magento Open Source 2.1.8 Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.1.7. This release contains over 15 security enhancements and updates that address image resizing and MasterCard BIN number expansion. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento 2.1.7 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.1.6. This release includes important performance enhancements for your Magento installation, especially for operations that involve the category page as well as image resizing. See Magento 2.1.6 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.1.5. This release updates the copyright date in every file. It does not contain any functional changes or security improvements. See Magento 2.1.5 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.1.4 includes over 20 functional fixes as well as an important security-related enhancement. See Magento 2.1.4 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.1.3 contains over 90 functional fixes as well as important enhancements to configurable product management. These features are described in Magento 2.1.3 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.1.2 includes security enhancements, functional fixes, and important enhancements to the Sales API. It is compatible with MySQL 5.7, and introduces support for PHP 7.0.4 and 5.6.5. See Magento2.1.2 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.1.1 improves storefront performance when using many configurable product variations, and addresses upgrade and installation issues. You can learn more in the Magento 2.1.1 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.1.0 GA. This release includes many functional fixes and security enhancements, plus new features that include significant interface enhancements. See Magento2.1.0 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
-Added Feb 27, 2018
We are pleased to present Magento Open Source 2.0.18. This release includes multiple enhancements to product security, a change to the Magento Admin to support upcoming USPS shipping changes, and a copyright update. We strongly recommend that all merchants upgrade as soon as possible. See Magento Open Source 2.0.18 Release Notes for more information.
-Added Nov 7th 2017
We are pleased to present Magento Open Source 2.0.17. This release includes critical enhancements to the security of your Magento software, and over 40 functional enhancements., including multiple community-submitted enhancements and pull requests. We strongly recommend that all merchants upgrade to this version as soon as possible. See http://devdocs.magento.com/guides/v2.0/release-notes/ReleaseNotes2.0.17CE.html for more information.
We are pleased to present Magento Open Source (formerly Community Edition) 2.0.16. This release includes critical enhancements to the security of your Magento software. It also provides support for the change to the USPS API that USPS implemented on September 1, 2017. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento Open Source 2.0.16 Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.0.15. This release includes only one enhancement: Support for changes in PayPal’s Instant Payment Notification (IPN) service. It does not contain any additional functional changes. See Magento 2.0.15 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.0.14. This release contains over 15 security enhancements and an update that supports MasterCard BIN number expansion. We strongly recommend that all merchants upgrade to this version as soon as possible. See Magento 2.0.14 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.0.13. This release updates the copyright date in every file. It does not contain any functional changes or security improvements. See Magento 2.0.13 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.0.12 includes over 20 functional fixes as well as an important security-related enhancement. See Magento 2.0.12 CE Release Notes for more information. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.0.11 contains over 70 functional fixes as well as important enhancements to configurable product management. These features are described in Magento 2.0.11 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.0.10 includes security enhancements, functional fixes, and important enhancements to the Sales API. It is compatible with MySQL 5.7. These features are described in Magento 2.0.10 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.0.9. This release focuses on functional fixes that address price and tax calculations in the shopping cart and product display in the mini cart, among other features. These fixes are described in the Magento 2.0.9 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
We are pleased to present Magento Community Edition 2.0.7. This release includes one functional fix, which is described in the Magento 2.0.7 CE Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.0.6 includes multiple functional fixes and both functional and security enhancements, which are described in the Magento 2.0.6 CE Release Notes . Functional features include the ability to use Redis for session storage and a change to our default file permissions strategy that provides a more flexible way to set file ownership and permissions. For information on security issues, see Magento Security Center. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Magento Community Edition 2.0.5 contains multiple functional enhancements, including improvements to the database, product data import/export, application installation, and several other features, which are described in the Release Notes. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Release 2.0.4 includes multiple functional fixes and performance enhancements, which are described in the Magento 2.0.4 CE Release Notes . It also addresses several security issues. For information on these security issues, see Magento Security Center. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data.
Release 2.0.2 resolves issues that some users encountered while upgrading from Magento 2.0.0 to Magento 2.0.1. It also includes the sample data, which is a LUMA-based theme, populated with sample products, customer registration, and other common storefront data. You can find more information in the Release Notes.
Magento 2.0.1 CE is not available for download. If you have already installed 2.0.1, please see technical bulletin Issues upgrading to 2.0.1 (Jan. 28, 2016) for more information. If you are installing Magento 2.0 for the first time, please download Magento 2.0.2.
Magento 2.0.0 CE is not available for download. If you have already installed 2.0.0, please see technical bulletin Issues upgrading to 2.0.1 (Jan. 28, 2016) for more information. If you are installing Magento 2.0 for the first time, please download Magento 2.0.2.
Downloader - 1.x
Magento Open Source Patches - 1.x
Please upload the patch into your Magento root directory and run the appropriate SSH command:
For patch files with the file extension .sh:
sh patch_file_name.sh
Example: sh PATCH_SUPEE-1868_CE_1.7.0.2_v1.sh
For patch files with the file extension .patch:
patch –p0 < patch_file_name.patch
Once that is done, refresh the cache in the Admin under "System > Cache Management" so that the changes will be reflected. We highly recommend you test all patches in a test environment before taking them live.
For further instructions, see: Installing a Patch for Community Edition
More information about the individual issues addressed by this patch is available in the patch details.
This patch updates Authorize.Net Direct Post integration to continue processing payments beyond March 14th 2019 (see MD5 Hash End of Life & Signature Key Replacement). There are additional steps that you need to execute after installing this patch to ensure continued use of Authorize.Net – read more Update Authorize.Net Direct Post from MD5 to SHA-512.
This patch requires previous security patches to be applied prior to installation:
1.9.2.0 - Patch requirements: SUPEE-10752, SUPEE-10570, SUPEE-10415, SUPEE-10266, SUPEE-9767 V2, SUPEE-9652, SUPEE-8788 V2, SUPEE-7405 v1.1, SUPEE-7405, SUPEE-6788, SUPEE-6482
1.9.2.1 - Patch requirements: SUPEE-10752, SUPEE-10570, SUPEE-10415, SUPEE-10266, SUPEE-9767 V2, SUPEE-9652, SUPEE-8788 V2, SUPEE-7405 v1.1, SUPEE-7405, SUPEE-6788
1.9.2.2 - Patch requirements: SUPEE-10752, SUPEE-10570, SUPEE-10415, SUPEE-10266, SUPEE-9767 V2, SUPEE-9652, SUPEE-8788 V2, SUPEE-7405 v1.1, SUPEE-7405
1.9.2.3 - Patch requirements: SUPEE-10752, SUPEE-10570, SUPEE-10415, SUPEE-10266, SUPEE-9767 V2, SUPEE-9652, SUPEE-8788 V2, SUPEE-7405 v1.1
1.9.2.4 - Patch requirements: SUPEE-10752, SUPEE-10570, SUPEE-10415, SUPEE-10266, SUPEE-9767 V2, SUPEE-9652, SUPEE-8788 V2
1.9.3.0 - Patch requirements: SUPEE-9652, SUPEE-8167, SUPEE-9767v2, SUPEE-10266, SUPEE-10415, SUPEE-10570v2, SUPEE-10752
1.9.3.1 - Patch requirements: SUPEE-9652, SUPEE-8167, SUPEE-9767v2, SUPEE-10266, SUPEE-10415, SUPEE-10570v2, SUPEE-10752
1.9.3.2 - Patch requirements: SUPEE-8167, SUPEE-9767v2, SUPEE-10266, SUPEE-10415, SUPEE-10570v2, SUPEE-10752
1.9.3.3. (Skipped because of deprecation)
1.9.3.4 - Patch requirements: SUPEE-10266, SUPEE-10415, SUPEE-10570v2, SUPEE-10752
1.9.3.5 (Doesn't exist)
1.9.3.6 - Patch requirements: SUPEE-10415, SUPEE-10570v2, SUPEE-10752
1.9.3.7 - Patch requirements: SUPEE-10570v2, SUPEE-10752
1.9.3.8 - Patch requirements: SUPEE-10570v2, SUPEE-10752
1.9.3.9 - - No patch requirements -
More information about the individual issues addressed by this patch is available in the patch details.
More information about the individual issues addressed by this patch is available in the patch details.
-This patch replaces SUPEE-9767. Previously installed SUPEE-9767 patch needs to be reverted prior to installing this version.
- This patch provides protection against several types of security-related issues, including remote code execution, information leaks and cross-site scripting. - Added Jul 12, 2017
- This patch is deprecated. Please use SUPEE-9767 v2 instead. This patch needs to be reverted prior to installed the new version. - This patch provides protection against several types of security-related issues, including remote code execution, information leaks and cross-site scripting. - Added May 30, 2017
NOTE: This patch has known issues. More information about the individual issues addressed by this patch as well as known issues is available in the patch details.
More information about the individual issues addressed by this patch is available in the patch details.
NOTE: if you have installed version 1 of the patch, it is recommended to do the following:
- Revert SUPEE-8788 v1/
- Revert SUPEE-1533 (if installed)
- Install SUPEE-3941 (if not installed yet)
- Install SUPEE-8788 v2
More information about the individual issues addressed by this patch is available in the patch release notes.
More information about the individual issues addressed by this patch is available in the patch release notes.
More information about the individual issues addressed by this patch is available in the patch release notes.
More information about the individual issues addressed by this patch is available in the patch release notes.
Note: if you have previously applied patch PATCH_SUPEE-6285_CE_1.9.1.1_v1, please revert it and apply PATCH_SUPEE-6285_CE_1.9.1.1_v2. More information on reverting and applying patches is available here.
Note: For versions earlier than Magento Community Edition 1.9.x, the new patches need to be installed on previous USPS patch (SUPEE-1868) issued in 2013. Please make sure the patch SUPEE-1868 is installed first.
Note: This patch is applicable only to Magento Community Edition 1.7 and 1.8. The patch was released previously - double check if it is not already installed before applying.
Note: please find details on this patch for Magento Community Edition 1.9 and Magento Community Edition 1.8.
XMLConnect Module
This is the latest stable release of the XMLConnect Module.
Database Repair Tool
The Database Repair Tool compares 2 databases (reference and target), and updates the target database so it has the same structure as the reference database. Learn More »
ver 1.9.x
Note: all but the first download are older versions of the software, and are not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to those version.
- Note: this release does not include SUPEE-10570v2 that resolves a checkout problem. Please make sure to install SUPEE-10570v2 for this version
- Resolves known issues introduced in 1.9.3.3
- There are known issues in this release. Please check here for details.
ver 1.8.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.7.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.6.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.5.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.4.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.3.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.2.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver 1.1.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
ver. 1.0.x
Note: this is an older version of the software, and is not the latest release available. The older version does not include latest security patches. Please make sure to apply the latest security patches to this version.
System Requirements
Prior to installation we recommend that you review Magento's System Requirements.
» Magento 2.0» Magento 1.x
Magento Reference Developer Documentation
Reference articles to assist developers and integrators with installations, upgrades, patches, and customizations.
» Magento 2.0» Magento 1.x
Test Automation Framework
Get instructions on installing and configuring the Magento Testing Framework (MTF).
» Magento 2.0» Magento 1.x installation instructions
» Magento 1.x user guide
Magento Open Source User Guide
This most up-to-date documentation for the current release combines easy-to-follow tutorials with comprehensive reference material.
» Magento 2.0» Magento 1.x
Magento Designer's Guide
A practical guide to the concepts and best practices of theme design for Magento stores. Leverage structural components, theme hierarchy, and fallback methods to create custom themes
» Magento 2.0» Magento 1.x