search

sejda-pdf / webp-imageio

Java ImageIO WebP support
Apache License 2.0
198 stars 74 forks source link

Update libwebp CVE-2023-1999 #36

Open fdaugan opened 9 months ago

fdaugan commented 9 months ago

Your package points to an old ref of libwebp related to CVE-2023-1999 Could you update it?

mateuszkwiecinski commented 9 months ago

Seeing this library (and none of its forks) are not maintained anymore, I started some time ago maintaining a fork of it. The most recent release v0.5.0 ships with binaries built from v1.3.2 of libwebp (which shouldn't be affected neither by CVE-2023-1999 nor a more recent one CVE-2023-4863)

In case someone wants to try it out, the binaries are available on maven central, sources can be found on Github: https://github.com/usefulness/webp-imageio

rohanmaheshh commented 8 months ago

I'm looking to generate dynamic libraries (mac and linux) for libwebp to use as shared libraries in my project. Could someone please provide a concise step-by-step guide or tips on achieving this?