Ensuring Long-Term Support for CKEditor 4 in Drupal

As developers, we understand the potential complexity of upgrading software versions. While we highly recommend upgrading to CKEditor 5, we recognize that it may not be feasible for everyone. That's why we want to highlight the Extended Support Model (ESM) offered for CKEditor 4 inside Drupal.

The Importance of Maintenance and Security

Previously, CKEditor 4 instances in Drupal were automatically updated with the latest features, bug fixes, and important security patches. However, since CKEditor 4 reached its End of Life (EOL) in June of 2023, and the CKEditor 4 Drupal module reached its EOL on Jan 1st, 2024, no further updates or patches will be provided for the free open-source version of CKEditor 4.

This leaves Drupal CKEditor 4 instances vulnerable to potential security risks for those customers unable to upgrade and not using the dedicated version of CKEditor 4 - CKEditor 4 LTS, which provides extended security support until the end of 2028.

Maintaining Security is a Process

Five security issues were identified in CKEditor 4 in 2024. We've made efforts to notify our customers through various channels, including email and in-editor messages. We strive to provide proactive notification of potential security concerns, however, we don't have contact information for all development teams using CKEditor 4 in Drupal.

Keeping CKEditor 4 Secure with Extended Support

For those still unable to upgrade to CKEditor 5, we offer an Extended Support option. This allows you to continue using CKEditor 4 and receive regular security updates.

We offer CKEditor 4 LTS as a Drupal module to provide the necessary security updates for CKEditor 4. By incorporating this module into your Drupal project, your CKEditor 4 instance will receive essential security patches on time.

How to Access the Extended Support Model

To access the CKEditor 4 LTS module and receive a license key for activation, you must purchase the Extended Support Model and visit your CKEditor dashboard. From there, you can obtain the license key and secure your CKEditor 4 instance. Contact our team for help choosing the right CKEditor 4 LTS license for your organization.

The CKEditor 4 LTS module contains the same APIs as the original CKEditor module that was shipped as part of Drupal. This means it's fully backward compatible, supporting each of the CKEditor 4 plugins you've already installed. The ESM package for Drupal includes our support for CKEditor 4 contrib modules that ship official CKEditor 4 plugins made by CKSource - the creators of CKEditor.

Exploring the CKEditor 4 Extended Support Model Additional Options

ESM Standard Package includes security vulnerability assurance — you get security fixes for CKEditor 4 bugs that may threaten your application's security.

In addition to that, you can get two optional "add-ons":

• Third-Party API Changes Assurance - for resolving critical issues caused by changes in third-party apps that CKEditor 4 relies on.
• Standard Support - get access to the CKSource Customer Support team for ongoing support requests as per your contract terms

Select from these options to strengthen the security, stability, and functionality of your CKEditor 4 implementation, further safeguarding your Drupal projects.

Maintaining CKEditor 4 while you plan your upgrade to CKEditor 5.

The ESM is expected to remain available until the end of 2028, providing the necessary time and resources to plan your transition to CKEditor 5 in Drupal. As an official Drupal 7 migration partner, we're happy to support your migration. If you still have questions on where to start please check out this comprehensive guide for the Drupal CKEditor 4 End of Life (EOL), offering guidance for developers and website administrators relying on CKEditor 4 in Drupal.

We encourage all maintainers of Drupal projects using CKEditor 4 who aren't yet in a position to migrate to CKEditor 5 to explore the benefits of the Extended Support Model. By doing so, you can protect your CKEditor 4 instance's security and stability while preparing an optimal transition path for you and your organization to CKEditor 5. Together, we can create a robust and secure environment for your Drupal projects.