I’ve got a client who was running an old version and apparently got hacked due to security issues in ImageMagick and/or libheif. They’re updated to latest ESR now, but they still have 1.23.1 and they insist on the 1.23.4 that’s in SECURITY: Update libheif to 1.23.4 (#1127) · discourse/discourse_dock…

I wouldn’t recommend manually overriding the base image - that’ll mean using an image which we haven’t tested for production use. Plus there is the risk of forgetting to unpin, as you said. I’ll look at whether we can bump the image soon. But it’s worth noting that all image-processing is now sandb…

root@live:/var/discourse# echo $(docker exec web_only bash -c 'find /usr/lib/ -name libheif*') /usr/lib/x86_64-linux-gnu/libheif.so.1.23.4 /usr/lib/x86_64-linux-gnu/libheif.so.1 Thanks!

Cómo obtener libheic

Soporte Instalación

david (David Taylor) 15 Septiembre, 2026 17:10 3

La imagen ha sido actualizada: Bump default base image to discourse/base:2.0.20260915-0028 (#1130) · discourse/discourse_docker@9384b12 · GitHub

Tema		Respuestas	Vistas
Test failure on HEIC image detection Development	1	848	11 Junio 2021
ImageMagick CVE-2016–3714 Bug	4	5037	3 Mayo 2016
Support for HEIC images Feature	21	5619	21 Septiembre 2020
HEVC images and error message Discourse::InvalidAccess Feature	6	387	8 Diciembre 2023
HEIC Images not loading in posts - appearing as URLs Support	8	530	18 Enero 2021

Cómo obtener libheic

Temas relacionados