Today all Magento users are getting an alert on backend. It advices to apply 2 security patches for fix new vulnerabilities on Magento. Is advised to apply asap before hacker´s community would receive news about this so my recommendation is don´t play with the security of your business.

The patches required are SUPEE-1533 and SUPEE-5344

https://www.magentocommerce.com/products/downloads/magento

Every patch checks first if your server has the required software, if you don´t have the ‘patch’ utility you need to install on your server,

yum install patch

in case of CentOS.

Just upload patches to root installation and run :

bash PATCH_SUPEE-1533_EE_1.12.x_v1-2015-02-10-08-19-16.sh;
bash PATCH_SUPEE-5345_CE_1.7.0.2_v1-2015-02-10-08-11-22.sh;

Example for Magento 1.7.2 Version

We applied these security patches in some installations, for our main Magento store and for some client´s sites. Notice every version of Magento has different patch version, so be sure don´t make a mistake and download wrong files.

In our case we applied every patch and make a git commit so we can roll back in case of issues.

Enjoy a healthy security.

I am not responsible for loss of data by using the comments of this blog. Make a backup of your system before you try any instructions in this post.