I’ve got a client who was running an old version and apparently got hacked due to security issues in ImageMagick and/or libheif. They’re updated to latest ESR now, but they still have 1.23.1 and they insist on the 1.23.4 that’s in SECURITY: Update libheif to 1.23.4 (#1127) · discourse/discourse_dock…

I wouldn’t recommend manually overriding the base image - that’ll mean using an image which we haven’t tested for production use. Plus there is the risk of forgetting to unpin, as you said. I’ll look at whether we can bump the image soon. But it’s worth noting that all image-processing is now sandb…

root@live:/var/discourse# echo $(docker exec web_only bash -c 'find /usr/lib/ -name libheif*') /usr/lib/x86_64-linux-gnu/libheif.so.1.23.4 /usr/lib/x86_64-linux-gnu/libheif.so.1 Thanks!

Wie bekommt man libheic?

Unterstützung Installation

david (David Taylor) 15. September 2026 um 17:10 3

Image wurde aktualisiert: Bump default base image to discourse/base:2.0.20260915-0028 (#1130) · discourse/discourse_docker@9384b12 · GitHub

Thema		Antworten	Aufrufe
Test failure on HEIC image detection Development	1	848	11. Juni 2021
ImageMagick CVE-2016–3714 Bug	4	5037	3. Mai 2016
Support for HEIC images Feature	21	5619	21. September 2020
HEVC images and error message Discourse::InvalidAccess Feature	6	387	8. Dezember 2023
HEIC Images not loading in posts - appearing as URLs Support	8	529	18. Januar 2021

Wie bekommt man libheic?

Verwandte Themen