Why Magento recommends to upgrade to 1.11.0EE even if patches are available for 1.10.0.2EE ?

[Mukesh Tiwari]

Hi,

I ran 'Magento Security' scan on an Magento enterprise 1.10.0.2 site which is fully patched still the security report stats following.

Your Magento version 1.10.0.2 is below the recommended minimum of 1.11.0 for edition Enterprise 1.10.0.2 Enterprise 1.11.0

Why do I get this message? Do I really need to upgrade to 1.11.0 version?

@msavich 

[msavich · Accepted solution]

EE 1.10 was released eight years ago and reached the end of support on Feb 2013.

The security patches for this versions (patch releases will stop at Jun 2020) are a backports, so, due to the core code differences there still might be missed unpatched vulnerabilities.

https://magento.com/sites/default/files/magento-software-lifecycle-policy.pdf

Generally speaking it is recommended to migrate to Magento 2, but if you prefer to stay on M1 - I would recommend to upgrade to the recent 1.14