# How to get libheic

**URL:** https://meta.discourse.org/t/how-to-get-libheic/412496
**Category:** Self-hosting
**Created:** [September 15, 2026, 4:31pm UTC](https://meta.discourse.org/t/how-to-get-libheic/412496 "2026-09-15T16:31:07Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [September 15, 2026, 4:31pm UTC](https://meta.discourse.org/t/how-to-get-libheic/412496/1 "2026-09-15T16:31:07Z")

</div>

I’ve got a client who was running an old version and apparently got hacked due to security issues in ImageMagick and/or libheif. They’re updated to latest ESR now, but they still have 1.23.1 and they insist on the 1.23.4 that’s in [SECURITY: Update libheif to 1.23.4 (#1127) · discourse/discourse\_docker@97c20dc · GitHub](https://github.com/discourse/discourse_docker/commit/97c20dc1fdc5ec8865fcdb6c3b108717e41e1b03)

Are there plans to bump the base image soon? If not, is the best/easier thing to do is edit `templates/web.template.yml` and update the base image there? (And then hope that I remember to un-edit it when the base image does get bumped?)

---

_[View the full topic](https://meta.discourse.org/t/how-to-get-libheic/412496)._