-
-
Notifications
You must be signed in to change notification settings - Fork 31
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
libvips built without JPEG2000 support #142
Comments
Saving TIFF images with JP2K compression requires libvips to be compiled against OpenJPEG. For security reasons, the pre-compiled binaries released on NuGet do not include OpenJPEG. See for example CVE-2021-3575, which is still not fixed. The pre-compiled binaries distributed on NuGet are intended to get people up and running as quickly as possible with the most popular web-based formats. You can always roll your own combination of libvips' dependencies, NetVips will look for a global installation if the NetVips.Native NuGet package isn't installed. On Linux or macOS it's easy to compile against OpenJPEG. On Windows, you can download the Note that the libvips binary |
Thank you for the detailed explanation, I could make it work using the Windows builds you mentioned (and after removing the NetVips.Native NuGet packages) ! The vulnerabilities of OpenJPEG are indeed a potential issue, thanks for bringing it up. |
I noticed on https://access.redhat.com/errata/RHSA-2021:4251 that the recent OpenJPEG 2.4.0 release includes a bunch of security fixes. Are you planning to include OpenJPEG in the pre-compiled NuGet binaries in the future? Or is jpeg2000 not popular enough? |
Those fixes are not present in any released version of OpenJPEG. I'm not aware of any plans to include OpenJPEG by default in the pre-compiled libvips binaries. Issue libvips/build-win64-mxe#40 might also be relevant here. |
I'll close this as "won't fix". In my opinion, JPEG2000 has no real benefits; it primarily serves as a compatibility solution for legacy software that still uses it. |
Hello :)
I'm trying to export Jp2k images using .Tiffsave but I get a
libvips built without JPEG2000 support
error. I'm using the NetVips 2.0.1 NuGet package and tried both NetVips.Native 8.11.3.1 and NetVips.Native.win-x64 8.11.3.1.Could it be that some dependencies are missing in the build provided by the NuGet package?
The text was updated successfully, but these errors were encountered: