I’ve got a client who was running an old version and apparently got hacked due to security issues in ImageMagick and/or libheif. They’re updated to latest ESR now, but they still have 1.23.1 and they insist on the 1.23.4 that’s in SECURITY: Update libheif to 1.23.4 (#1127) · discourse/discourse_dock…

I wouldn’t recommend manually overriding the base image - that’ll mean using an image which we haven’t tested for production use. Plus there is the risk of forgetting to unpin, as you said. I’ll look at whether we can bump the image soon. But it’s worth noting that all image-processing is now sandb…

root@live:/var/discourse# echo $(docker exec web_only bash -c 'find /usr/lib/ -name libheif*') /usr/lib/x86_64-linux-gnu/libheif.so.1.23.4 /usr/lib/x86_64-linux-gnu/libheif.so.1 Thanks!

如何获取 libheic

支持安装

david (David Taylor) 2026 年9 月 15 日 17:10 3

镜像已更新：Bump default base image to discourse/base:2.0.20260915-0028 (#1130) · discourse/discourse_docker@9384b12 · GitHub

话题		回复	浏览量
Test failure on HEIC image detection Development	1	848	2021 年6 月 11 日
ImageMagick CVE-2016–3714 Bug	4	5037	2016 年5 月 3 日
Support for HEIC images Feature	21	5619	2020 年9 月 21 日
HEVC images and error message Discourse::InvalidAccess Feature	6	387	2023 年12 月 8 日
HEIC Images not loading in posts - appearing as URLs Support	8	529	2021 年1 月 18 日

如何获取 libheic

相关话题