Magento has published a software update that covers security issues.
Magento Community Edition 18.104.22.168 (merch.docs.magento.com)
We are pleased to bring you Magento Community Edition 22.214.171.124, which bundles improvements for issues reported by our merchants after installing the latest patch SUPEE-7405, or Magento Community Edition Release 126.96.36.199.
Important! Use Magento Community 188.8.131.52 or later for all new installations and upgrades to ensure that you have the latest fixes, features, and security updates.
Patch Bundle (SUPEE-7405 v.1.1)
We highly recommend that all users of Magento Community Edition 1.9.0.x either install the SUPEE-7405 v 1.1 patch bundle, or upgrade to Magento Community Edition 184.108.40.206.
Updated versions of this release are now available. The updates add support for PHP 5.3 and address issues with upload file permissions, merging carts, and SOAP APIs experienced with the original release. They DO NOT address any new security issues.
The previous release was on January 21, 2016.
Our Website Maintenance Department will be in contact with our clients regarding this upgrade.