I have some customers that use some "older" Magento 2 versions, like for example 2.3.4. I would like to keep the store updated with the latest security patches but without doing a full Magento 2 upgrade.

How can I install the latest security patch (2.3.7-p1) on my 2.3.4 version?

CodePudding user response：

You would have to manually spot all the changes between Magento 2.3.7-p1 and 2.3.7 and then based on those differences write your own patches for your Magento 2.3.4.

So basically it will be much more work then updating to 2.3.7-p1.

CodePudding user response：

Magento 2 has a Quality Patches Tool. By using this package, you can easily install patches without having to upgrade to a new Magento version.

• Install module: composer require magento/quality-patches
• Check current patch status: ./vendor/bin/magento-patches status
• Install individual patches: ./vendor/bin/magento-patches apply MAGETWO-XXXX

Also refer to Magento documentation: https://devdocs.magento.com/guides/v2.4/comp-mgr/patching/mqp.html