Extended Security Release

CiviCRM Extended Security Release (ESR) provides a longer release of CiviCRM, allowing for fewer upgrades but fewer new features. The latest release of ESR is version 5.27 (released July 2020) and is available to sponsoring Partners and to end user organizations that subscribe to it. It is free for CiviCRM members. The next ESR release will be 5.33 (January 2021).

The latest stable version of CiviCRM, which is released monthly, will continue as it currently does. It is free to download and use, same as it was yesterday. Same as it always will be.

Why Extended Security Release?

There are several reasons to consider using CiviCRM ESR. Here are a few:

  1. For large organizations with heavy customizations, it may be advantegous to forego new features in exchange for consistency.
  2. For smaller organizations without a CiviCRM partner, you may find it onerous to upgrade monthly.
  3. Maybe you just want to help fund CiviCRM and, well, using ESR is as good as using the latest stable.

No matter the reason, CiviCRM ESR is not a newer, better, or otherwise premium version of CiviCRM. It is an older version that's supported longer, allowing organizations that prefer longevity over new features to have just that.

Some Details

  1. CiviCRM ESR was released on November 7th and officially began with CiviCRM version 5.7.
  2. Each version of ESR will receive 6 months of support (security and critical bug fixes).
  3. The CiviCRM Core Team may extend the release to a full 12 months of support, depending on the financial viability of maintaining this version of CiviCRM.
  4. If we cannot manage ESR in sustainable manner, we will discontinue it.

Subscribe to CiviCRM Extended Security Release

CiviCRM ESR is a paid version of CiviCRM and is licensed on a per site basis. It is available by subscription to the community and to CiviCRM Partners at a discounted rate (subscribe via your user dashboard).

Common Questions

We just subscribed, how do we access ESR?

First and foremost, thank you for supporting ESR. We’ve already received your subscription and are processing it. You'll be provided access to ESR via https://lab.civicrm.org where you can download the necessary files.

If you've not already done so, please log into https://lab.civicrm.org using the same credentials that you've established at https://civicrm.org.

We are already a member. How do we access the ESR files?

Ensure that you're registered with https://civicrm.org and, using the same credentials, log into https://lab.civicrm.org. Once complete, send us an email at info@civicrm.org stating that you need to be added to the ESR project.

We are an end user organization that’s subscribed to ESR. On how many sites can we use ESR?

Subscription to ESR is valid for one live site. You may use the same license on development, staging and testing sites without issue.

We deploy a site with a custom workflow based on "git". How can we merge ESR changes into our project?

ESR includes an export of the git history. Alongside the normal downloads (such as "civicrm-X.Y.Z-drupal.tar.gz" or "civicrm-X.Y.Z-wordpress.zip"), there is another file "civicrm-X.Y.Z-patchset.tar.gz". The export is generated via "git format-patch", and you can import with "git am /path/to/patch/files". Of course, we can't anticipate all the custom workflows out there. Fortunately, the patch-file format is versatile and supported by many tools.

Where can we participate in ESR related discussions?

ESR discussions take place in a dedicated channel on https://chat.civicrm.org. Register for an account at https://civicrm.org and we’ll add you to the channel.

Thanks to the following CiviCRM partners for supporting Extended Security Release

Need help upgrading to the latest version of ESR? ESR Sponsors are experts at deploying and maintaining CiviCRM.

BackOffice Thinking
Palante Technology Cooperative
Progressive Technology Project



JMA Consulting
Greenleaf Advancemenet