[GH-ISSUE #3316] django-ckeditor bundles CKEditor 4.22.1 isn't supported anymore #1831

Closed
opened 2026-02-27 11:19:22 +03:00 by kerem · 6 comments
Owner

Originally created by @bosgold on GitHub (Sep 10, 2024).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/3316

Impacted versions

  • OS Version: Ubuntu 18.04
  • Database Type: MySQL
  • Database version: MariaDB 10.6.15
  • Modoboa: 2.2.4
  • Webserver: Nginx
  • Pyhton: 3.8.16
  • pip: 24.1.1

Steps to reproduce

Starting the upgrade procedure to Modoboa 2.3.1.
Including the by pip desired upgrade of pip during this procedure.

Current behavior

Upgrade as such was successfull. But all cronjobs " $PYTHON $INSTANCE/manage.py ..." throw out a warning message

System check identified some issues:

WARNINGS:
?: (ckeditor.W001) django-ckeditor bundles CKEditor 4.22.1 which isn't supported anmyore and which does have unfixed security issues, see for example https://ckeditor.com/cke4/release/CKEditor-4.24.0-LTS . You should consider strongly switching to a different editor (maybe CKEditor 5 respectively django-ckeditor-5 after checking whether the CKEditor 5 license terms work for you) or switch to the non-free CKEditor 4 LTS package. See https://ckeditor.com/ckeditor-4-support/ for more on this. (Note! This notice has been added by the django-ckeditor developers and we are not affiliated with CKSource and were not involved in the licensing change, so please refrain from complaining to us. Thanks.)

Expected behavior

No such warnings.
Besides redirecting the cronjob warnings/errors to /dev/null. Don't think this is a good idea.

Originally created by @bosgold on GitHub (Sep 10, 2024). Original GitHub issue: https://github.com/modoboa/modoboa/issues/3316 # Impacted versions * OS Version: Ubuntu 18.04 * Database Type: MySQL * Database version: MariaDB 10.6.15 * Modoboa: 2.2.4 * Webserver: Nginx * Pyhton: 3.8.16 * pip: 24.1.1 # Steps to reproduce Starting the upgrade procedure to Modoboa 2.3.1. Including the by pip desired upgrade of pip during this procedure. # Current behavior Upgrade as such was successfull. But all cronjobs " $PYTHON $INSTANCE/manage.py ..." throw out a warning message > System check identified some issues: > > WARNINGS: > ?: (ckeditor.W001) django-ckeditor bundles CKEditor 4.22.1 which isn't supported anmyore and which does have unfixed security issues, see for example https://ckeditor.com/cke4/release/CKEditor-4.24.0-LTS . You should consider strongly switching to a different editor (maybe CKEditor 5 respectively django-ckeditor-5 after checking whether the CKEditor 5 license terms work for you) or switch to the non-free CKEditor 4 LTS package. See https://ckeditor.com/ckeditor-4-support/ for more on this. (Note! This notice has been added by the django-ckeditor developers and we are not affiliated with CKSource and were not involved in the licensing change, so please refrain from complaining to us. Thanks.) # Expected behavior No such warnings. Besides redirecting the cronjob warnings/errors to /dev/null. Don't think this is a good idea.
kerem 2026-02-27 11:19:22 +03:00
Author
Owner

@belzebub40k commented on GitHub (Sep 11, 2024):

Seems to be a known upstream issue with no real fix but you can silence the warning via SILENCED_SYSTEM_CHECKS in settings.py.

https://github.com/django-ckeditor/django-ckeditor/issues/764

SILENCED_SYSTEM_CHECKS = [
    ...
    "ckeditor.W001",  # CKEditor 4.22.1 warning
]
<!-- gh-comment-id:2343300644 --> @belzebub40k commented on GitHub (Sep 11, 2024): Seems to be a known upstream issue with no real fix but you can silence the warning via `SILENCED_SYSTEM_CHECKS` in _settings.py_. https://github.com/django-ckeditor/django-ckeditor/issues/764 ``` SILENCED_SYSTEM_CHECKS = [ ... "ckeditor.W001", # CKEditor 4.22.1 warning ] ```
Author
Owner

@VladlenO commented on GitHub (Sep 29, 2024):

Seems to be a known upstream issue with no real fix but you can silence the warning via SILENCED_SYSTEM_CHECKS in settings.py.

django-ckeditor/django-ckeditor#764

SILENCED_SYSTEM_CHECKS = [
    ...
    "ckeditor.W001",  # CKEditor 4.22.1 warning
]

In which file exactly should I specify the prohibition on updating? Thanks.

<!-- gh-comment-id:2381450115 --> @VladlenO commented on GitHub (Sep 29, 2024): > Seems to be a known upstream issue with no real fix but you can silence the warning via `SILENCED_SYSTEM_CHECKS` in _settings.py_. > > [django-ckeditor/django-ckeditor#764](https://github.com/django-ckeditor/django-ckeditor/issues/764) > > ``` > SILENCED_SYSTEM_CHECKS = [ > ... > "ckeditor.W001", # CKEditor 4.22.1 warning > ] > ``` In which file exactly should I specify the prohibition on updating? Thanks.
Author
Owner

@belzebub40k commented on GitHub (Sep 29, 2024):

@VladlenO in the settings.py of your modoboa instance. There should already be a section SILENCED_SYSTEM_CHECKS. It does not prohibit any updates it only silences the warning.

<!-- gh-comment-id:2381594719 --> @belzebub40k commented on GitHub (Sep 29, 2024): @VladlenO in the **settings.py** of your modoboa instance. There should already be a section SILENCED_SYSTEM_CHECKS. It does not prohibit any updates it only silences the warning.
Author
Owner

@renarios commented on GitHub (Nov 11, 2024):

Is it possible to just install django-ckeditor-5, or does the configuration of modoboa have to be changed for that?

<!-- gh-comment-id:2467726719 --> @renarios commented on GitHub (Nov 11, 2024): Is it possible to just install django-ckeditor-5, or does the configuration of modoboa have to be changed for that?
Author
Owner

@bosgold commented on GitHub (Nov 11, 2024):

Replacing CKEditor 4 by django-ckeditor 5 does not work.
Some of the things I already tried.

<!-- gh-comment-id:2468503769 --> @bosgold commented on GitHub (Nov 11, 2024): Replacing CKEditor 4 by django-ckeditor 5 does not work. Some of the things I already tried.
Author
Owner

@tonioo commented on GitHub (Nov 29, 2024):

There is actually a licence issue with CKEditor 5 (GPLv2) so I guess the easiest to fix this issue for now is to silence the warning. Then, a new HTML editor using a compatible licence should be used.

<!-- gh-comment-id:2507337473 --> @tonioo commented on GitHub (Nov 29, 2024): There is actually a licence issue with CKEditor 5 (GPLv2) so I guess the easiest to fix this issue for now is to silence the warning. Then, a new HTML editor using a compatible licence should be used.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1831
No description provided.