Hello,
I got the following system internal message:
"Important: Upgrade your AbanteCart with the patch version 1.4.2.1 Please click --> this link to start the upgrade. This release addresses a security vulnerability in Page Builder (CVE-2025-50972). Impacted Versions All 1.4.x versions Is the Upgrade Required? If Page Builder is enabled and actively used, upgrading is strongly recommended."
I followed the instructions and upgraded it via the provided link. It said it was successful but my abantecart is still showing 1.4.2, and the update notification keeps showing up. Nothing is broken and I've tried the update twice. There are no errors shown in any logs etc.,
Please advise. Thank you.
hi,
what about install/upgrade log?
Quote from: MBB on September 12, 2025, 09:51:28 PMHello,
I got the following system internal message:
"Important: Upgrade your AbanteCart with the patch version 1.4.2.1 Please click --> this link to start the upgrade. This release addresses a security vulnerability in Page Builder (CVE-2025-50972). Impacted Versions All 1.4.x versions Is the Upgrade Required? If Page Builder is enabled and actively used, upgrading is strongly recommended."
I followed the instructions and upgraded it via the provided link. It said it was successful but my abantecart is still showing 1.4.2, and the update notification keeps showing up. Nothing is broken and I've tried the update twice. There are no errors shown in any logs etc.,
Please advise. Thank you.
I have this exact same issue too.
Quote from: abolabo on September 15, 2025, 05:13:04 AMhi,
what about install/upgrade log?
The log shows no errors, every entry (6 for the upgrade) was green and the version column showed 1.4.2.1
However, backups etc., done after show it was 1.4.2 and the UI shows 1.4.2 as well. Repeating the process (as I get the upgrade notification every day) shows more green entries but no difference.
There are no error logs.
Thank you for your time in investigating this.
Hello.
Thank you for the details. The upgrade has successfully replaced the patched files, so the security fix is already applied. We've identified an issue on some servers where the version number is not being updated correctly in the interface.
To correct this, please manually edit the file: core/version.php and update it to:
<?php
define('MASTER_VERSION', '1');
define('MINOR_VERSION', '4');
define('VERSION_BUILT', '2.1');
Ok that seems to have fixed it. I'll double check if I get that upgrade message tomorrow. Thanks for the help, it is greatly appreciated.
I assume an update will include this at some point?
To confirm, the issue (for me) is fixed as per your instructions. Thank you again for your kind assistance.