[From nobody Wed Apr  8 08:45:10 2026
Received: (at submit) by bugs.debian.org; 11 Apr 2025 19:31:26 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
 (2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-110.9 required=4.0 tests=BAYES_00,DKIMWL_WL_HIGH,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FROMDEVELOPER,
 PGPSIGNATURE,SPF_HELO_NONE,SPF_NONE,UNPARSEABLE_RELAY,
 USER_IN_DKIM_WELCOMELIST,USER_IN_DKIM_WHITELIST autolearn=ham
 autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 14; hammy, 121; neutral, 23; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: &lt;rouca@debian.org&gt;
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:45758)
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=stravinsky.debian.org, EMAIL=hostmaster@stravinsky.debian.org (verified)
 by buxtehude.debian.org with utf8esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.94.2) (envelope-from &lt;rouca@debian.org&gt;) id 1u3K62-00DQXv-Av
 for submit@bugs.debian.org; Fri, 11 Apr 2025 19:31:26 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Date:Subject:To:From:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=EHkOwZiLr8h8iOly11iKw4KPYDwJQMKe+LUn1dY4hA0=; b=vrTQ5AGE+pN/oXRORAR3GwLuig
 u9PDGIyA1XxwISIBit8vbEQejelqW0c35oSql1O9x+7J0VtwWCIFygE7019z+S0/T3l7Y8pmlGuFH
 /SFJy29fHYoz0xbvreFVDmu3lqpJnMriL8c6QNyVP9zUtthZFxsEcEkDXsmauqEIkAuFqNh3cIsm5
 w/9/rMvy/OeUBPCZLG0w2RbgpRm+58sEcPVaVBBnjmaUasLsmEiqTwqglLYoDsDzgDUWi9Ewl8i+z
 7qkkw2mjWlO7N0G7e7g64mEq8kx5zFYbOLwE1L9uG4pnC7v36PRK8WVeSMaaiUt3qImYm8qX5nqdI
 /BAFvIoQ==;
Received: from authenticated user by stravinsky.debian.org with utf8esmtpsa
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.94.2) (envelope-from &lt;rouca@debian.org&gt;)
 id 1u3K5y-000lCH-Vj; Fri, 11 Apr 2025 19:31:23 +0000
From: Bastien Roucaries &lt;rouca@debian.org&gt;
To: Debian Bug Tracking System &lt;submit@bugs.debian.org&gt;
Subject: ckeditor4: EOL upstream commercial support only
Date: Fri, 11 Apr 2025 21:31:22 +0200
Message-ID: &lt;4144268.iIbC2pHGDl@debian-ei&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; boundary=&quot;nextPart9954370.CDJkKcVGEf&quot;;
 micalg=&quot;pgp-sha512&quot;; protocol=&quot;application/pgp-signature&quot;
X-Debian-User: rouca
Delivered-To: submit@bugs.debian.org

--nextPart9954370.CDJkKcVGEf
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset=&quot;utf-8&quot;; protected-headers=&quot;v1&quot;
From: Bastien Roucaries &lt;rouca@debian.org&gt;
To: Debian Bug Tracking System &lt;submit@bugs.debian.org&gt;
Subject: ckeditor4: EOL upstream commercial support only
Date: Fri, 11 Apr 2025 21:31:22 +0200
Message-ID: &lt;4144268.iIbC2pHGDl@debian-ei&gt;
MIME-Version: 1.0

Source: ckeditor4
Severity: serious
Tags: security
Justification: security issue
X-Debbugs-Cc: Debian Security Team &lt;team@security.debian.org&gt;

ckeditor4 is end of lifed
since June 2023: https://ckeditor.com/blog/ckeditor-4-end-of-life/

ckeditor4 LTS is commercial
see https://github.com/ckeditor/ckeditor4/blob/master/LICENSE.md

Bastien

--nextPart9954370.CDJkKcVGEf
Content-Type: application/pgp-signature; name=&quot;signature.asc&quot;
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
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=wqHO
-----END PGP SIGNATURE-----

--nextPart9954370.CDJkKcVGEf--
]