[opencms-dev] Opencms webp image format

Alex Kandzior alex at opencms.org
Thu Sep 28 10:42:08 CEST 2023 

Some update on the webp image format support:

We have evaluated the webp library that Kai is using.

The home repository of this library is:
This is https://github.com/sejda-pdf/webp-imageio 

In the library, native libs are used to read / write the webp images.
It is safe to assume the Google libwebp reference implementation is used at the core of this.

The sejda-pdf/webp-imageio repository has not been updated for some time, so the native libs used are at last 4 years old. 

Recently there was a buffer overflow security issue detected in the Google libwebp library. 
https://www.forbes.com/sites/daveywinder/2023/09/14/new-emergency-chrome-security-update-after-critical-ios-1661-release/

Quote from the article: 'Developer and blogger Alex Ivanovs has confirmed that, as well as web browsers, “any software that uses the libwebp library” is affected by this vulnerability...'

Since the libraries included in sejda-pdf/webp-imageio are so old, we have to assume that these are also affected by the security issue.

We therefore will refrain from including this webp library in the OpenCms distribution.

Hopefully in the future there will be an updated webp library available that we can include.

Kind regards,
Alex.

-------------------
Alexander Kandzior

Alkacon Software - The OpenCms Experts                                                    
http://www.alkacon.com - http://www.opencms.org                                                          


> Am 21.09.2023 um 12:32 schrieb Kai Widmann <Widmann at mediaworx.de>:
> 
> Hey Alex,
> 
> this sounds great.
> Any chance the OpenCms Days will make a triumphant return some day? I miss these days!
> 
> Cheers
> 
> Kai
> 
> _______________________________________________
>  
> Kai Widmann
> mediaworx berlin AG
>  
> +49 30 27580-262
> Digitale Visitenkarte: https://mediaworx.com/021
> www.mediaworx.com
> 
>> Am 21.09.2023 um 10:25 schrieb Alex Kandzior <alex at opencms.org>:
>> 
>>>> @Alkacon: it might be a good idea to add this as a dependency for the OpenCms core, that way WebP should work as expected.
>> 
>> Thanks Kai for the hint. 
>> We will run some checks and if everything works as expected we will include this lib for OpenCms 16. 
>> 
>> Kind regards,
>> Alex.
>> 
>> -------------------
>> Alexander Kandzior
>> 
>> Alkacon Software - The OpenCms Experts                                                    
>> http://www.alkacon.com - http://www.opencms.org                                                          
>> 
>> 
>>> Am 21.09.2023 um 09:03 schrieb Giuseppe Lonis via opencms-dev <opencms-dev at opencms.org>:
>>> 
>>> Great news Kai, 
>>> really congratulations on the solution. 
>>> 
>>> Thank you so much
>>> Giuseppe
>>> < >
>>> Giuseppe Lonis – ConsulMedia Srl
>>> Via Mattei 72 - 09170 Oristano (OR) - ITALY
>>> +39 3939121580 | +39 078371405
>>> glonis at consulmedia.it <mailto:glonis at consulmedia.it> | www.consulmedia.it <http://www.consulmedia.it/>
>>> Socio professionista Aiap - www.aiap.it <http://www.aiap.it/>
>>> 
>>> Le informazioni contenute in questo messaggio di posta elettronica sono riservate e confidenziali e ne è vietata la diffusione in qualsiasi modo o forma. Qualora Lei non fosse la persona destinataria del presente messaggio, La invitiamo a non diffonderlo e ad eliminarlo, dandone gentilmente comunicazione al mittente così come previsto dal sistema aziendale di gestione della sicurezza delle informazioni ISO 27001:2022 e dal GDPR.
>>> The content of this e-mail is reserved and confidential and any form of distribution of this message (and any attachment contained) is strictly prohibited. If you received this message by mistake, please delete it without sharing any information and immediately contact the sender, as required by the company's Information Security Management System ISO 27001:2022 and by the GDPR.
>>> 
>>> 
>>> Il giorno mer 20 set 2023 alle ore 17:10 Kai Widmann <Widmann at mediaworx.de <mailto:Widmann at mediaworx.de>> ha scritto:
>>>> Hey Giuseppe (an to everyone who is interested in WebP with OpenCms), 
>>>> 
>>>>> Therefore the problem cannot be solved. 
>>>> I beg to differ, I solved this with the library "webp-imageio" described here: 
>>>> https://genuinecoder.com/java-webp-image-read-save-tutorial/
>>>> 
>>>> webp-imageio adds native support for WebP to Java, so the native image methods used in OpenCms image scaling also work with WebP. It’s really as simple as dropping the jar in the lib folder (or defining a Maven/Gradle dependency).
>>>> 
>>>> My first tests are really promising, image sizes in the CMS are now correct (instead of -1 x -1), image scaling of WebP images is working as expected. So far so good.
>>>> It’s important to know that you have to re-upload WebP images, I guess the size is read during the initial upload, once wrong it doesn’t get corrected by using the library. But after re-uploading the image, everything seems to be fine. 
>>>> If I for some reason find that this does not work as expected in the end, I’ll report. 
>>>> 
>>>> @Alkacon: it might be a good idea to add this as a dependency for the OpenCms core, that way WebP should work as expected.
>>>> 
>>>> Cheers
>>>> 
>>>> Kai
>>>> 
>>>> _______________________________________________
>>>>  
>>>> Kai Widmann
>>>> mediaworx berlin AG
>>>>  
>>>> +49 30 27580-262
>>>> Digitale Visitenkarte: https://mediaworx.com/021
>>>> www.mediaworx.com <http://www.mediaworx.com/>
>>>> 
>>>>> Am 20.09.2023 um 08:59 schrieb Giuseppe Lonis <glonis at consulmedia.it <mailto:glonis at consulmedia.it>>:
>>>>> 
>>>>> Hi Kai, 
>>>>> unfortunately on the opencms issues they wrote that the ImageScaler library does not support that format. 
>>>>> Therefore the problem cannot be solved. 
>>>>> 
>>>>> Greetings Giuseppe
>>>>> 
>>>>> 
>>>>> 
>>>>> Il giorno mar 19 set 2023 alle ore 18:13 Kai Widmann <Widmann at mediaworx.de <mailto:Widmann at mediaworx.de>> ha scritto:
>>>>>> Hello Giuseppe, 
>>>>>> 
>>>>>> I’m facing similar problems in OpenCms 15. May I ask if you solved this and if so, how?
>>>>>> 
>>>>>> Cheers
>>>>>> 
>>>>>> Kai
>>>>>> 
>>>>>> _______________________________________________
>>>>>>  
>>>>>> Kai Widmann
>>>>>> mediaworx berlin AG
>>>>>>  
>>>>>> +49 30 27580-262
>>>>>> Digitale Visitenkarte: https://mediaworx.com/021
>>>>>> www.mediaworx.com <http://www.mediaworx.com/>
>>>>>> 
>>>>>>> Am 15.08.2023 um 10:55 schrieb Giuseppe Lonis via opencms-dev <opencms-dev at opencms.org <mailto:opencms-dev at opencms.org>>:
>>>>>>> 
>>>>>>> HI,
>>>>>>> on opencms version 14 there are problems displaying images in webp format.
>>>>>>> In particular, in the preview inside content the image is not resized, unlike the jpg ones.
>>>>>>> 
>>>>>>> Also the scaling of the image with the command image.webp?__scale=w:1200,h:1200,t:2,c:transparent,p:0 does not work (it should become a square image instead it keeps the original format).
>>>>>>> 
>>>>>>> Finally, due to this problem the image gallery is very slow to load.
>>>>>>> 
>>>>>>> 
>>>>>>> A thousand thanks
>>>>>>> Greetings Joseph
>>>>>>> _______________________________________________
>>>>>>> This mail is sent to you from the opencms-dev mailing list
>>>>>>> To change your list options, or to unsubscribe from the list, please visit
>>>>>>> https://lists.opencms.org/mailman/listinfo/opencms-dev
>>>>>>> 
>>>>>>> 
>>>>>>> 
>>>>>> 
>>>> 
>>> _______________________________________________
>>> This mail is sent to you from the opencms-dev mailing list
>>> To change your list options, or to unsubscribe from the list, please visit
>>> https://lists.opencms.org/mailman/listinfo/opencms-dev
>>> 
>>> 
>>> 
>> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencms.org/pipermail/opencms-dev/attachments/20230928/1b23d412/attachment.htm>

More information about the opencms-dev mailing list