[pkg-horde] Bug#769031: Unable to compose in IMP - package unusable

Mathieu Parent sathieu at debian.org
Mon Nov 10 20:52:12 UTC 2014


Package: php-horde-editor
Version: 2.0.4+debian0-3
Severity: important

Hello,

I tried to fix it but this didn't worked ...

Current upstream Horde_Editor includes ckeditor 3.6.6.
Current ckeditor package in Debian is 4.4.4.

According to Michael Slusarz (core Horde dev):
> This will *never* work with the current code.
>
> IMP uses the Ckeditor 3.x javascript API.  Ckeditor's 4.x javascript  
> API is completely different.
> 
> Using Ckeditor 4.x will only be possible when all of IMP's javascript  
> code interfacing with Ckeditor is rewritten.

Ref: http://lists.horde.org/archives/horde/Week-of-Mon-20141110/052934.html

Some more info:
- currently, the ckeditor package (v4.4.4) is a dependency of php-horde-editor and sogo-common
- if we use the embedded ckeditor in php-horde-editor, there may be more work security-wise.
- *but* Horde upstream will also do those security updates
- I will ask the release team about this complex issue

Regards

Mathieu Parent



More information about the pkg-horde-hackers mailing list