Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

    • chameleon@kbin.social
      link
      fedilink
      arrow-up
      29
      ·
      edit-2
      9 months ago

      The current advisory is in webm (VP8 specifically). The webp one was 2 weeks ago. …yeah, not a good time for web browsers lately…

      (edit: noticed OP actually did link the webp one, I thought it’d be CVE-2023-5217 because that’s being linked elsewhere)

    • Lucidlethargy@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      3
      ·
      edit-2
      9 months ago

      WebP is currently the smallest and highest quality format accepted by browsers today. I have no idea why you think so negatively of it, but it’s irreplaceable until something better is widely adopted, and thus viable.

      It’s the best format for websites as of this exact moment.

      • mlg@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        ·
        9 months ago

        Highest compression, not highest quality (arguably).

        Also heavy compression which takes more resources to display.

        Also poor compatibility outside browsers.

        afaik it’s basically still just VP8 in image format with added metadata, and google refuses to support alternatives because they like to own the browser market.

        I think there was gonna be a webp and webm 2, but it never happened.

      • CmdrShepard@lemmy.one
        link
        fedilink
        English
        arrow-up
        34
        arrow-down
        2
        ·
        9 months ago

        Try linking one and sending it to someone else. I tried it and the recipient died two days later.

      • gamer@lemm.ee
        link
        fedilink
        English
        arrow-up
        24
        ·
        9 months ago

        There’s some politics involved. Basically, everyone is rallying behind JPEGXL instead of WebP, but Google refuses to support JPEGXL in Chrome. The reasoning they gave is weak, so it’s assumed that they’re just trying to force the format they invented on everyone because they can.

        IIRC, performance of the two formats is similar.

        • jackpot@lemmy.ml
          link
          fedilink
          English
          arrow-up
          4
          ·
          9 months ago

          why does everyone like jpegxl and why does google care if it’s foss

          • GamingChairModel@lemmy.world
            link
            fedilink
            English
            arrow-up
            13
            ·
            9 months ago

            JPEG XL, like AVIF and HEIC and WebP, is basically a next generation format that supports much higher quality at lower file sizes compared to JPEG and PNG.

            Among those four formats, JPEG XL is promising because it allows for recompression of JPEG losslessly. That means if you take an image that was already encoded as JPEG (as the vast, vast majority of images are), you can recompress with no additional loss in quality from the conversion. That’s something that isn’t true of the others.

            JPEG XL also has a much higher maximum quality and specific features great for high quality image workflows (like for professional photographers, publishers, and those who need to print images). WebP, AVIF, and HEIC are good for sharing on the web, but the printing and publishing workflow support requires a few more conversions along the way.

            I thought this blog post by a cloud image delivery network that played a big role in developing JPEG XL was pretty persuasive, even if they had a direct interest in JPEG XL adoption.

            • Vub@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              9 months ago

              But aren’t jpegxl and webp meant for completely different uses? Like jpeg and png are. Jpeg is better for photos and png for graphics.

              Also using “XL” in a name for an encoding which does better compression was not the smartest idea, that will surely confuse many users.

              • GamingChairModel@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                9 months ago

                But aren’t jpegxl and webp meant for completely different uses? Like jpeg and png are. Jpeg is better for photos and png for graphics.

                No. JPEG XL is designed to be better at pretty much everything than webp (which was just adapted from a video format that was designed to be really efficient at video but without touching any patents). JPEG is best at photographs at screen resolutions, and PNG is best for screenshots of computer interfaces with lots of repeated colors, and DNG/TIFF are great for high resolution and bit depth (like for professional printing and publishing, or raw image capture from the camera). JPEG XL does a good job at all of those.

        • TwoGems@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          9 months ago

          Exactly why WebP is shit, and Google literally owning everything shouldn’t be normalized.

      • Lantern@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        9 months ago

        It’s a format that most major image editors don’t support. Basically, if you wanted to do anything with it, you need to first convert it to a different format. It’s the only format that has this problem.

        • ipkpjersi@lemmy.ml
          link
          fedilink
          English
          arrow-up
          6
          ·
          9 months ago

          That’s fair except it’s not the only format that has this problem. There’s JPEG 2000 and AVIF which have even less image editor support.

        • glad_cat@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 months ago

          I’m old enough to remember when the same argument was made for PNG files. It’s a stupid argument.

          • Lantern@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            9 months ago

            WEBP is 13 years old at this point and lacks the support that PNG had 3 years into its lifetime. The benefits are marginal, and without platform support it can’t catch on. Do your research before calling someone else’s argument stupid.

      • SnowdenHeroOfOurTime@unilem.org
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        7
        ·
        9 months ago

        I think most people dislike it because Google made it. Google is evil as fuck, but it’s a damn good image format, obviously so since it’s way smaller for the same visuals compared to the older formats, plus it supports transparency. Google is evil but still makes good software sometimes.

    • King@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      13
      ·
      9 months ago

      ? I dont like it because I’m uneducated so it’s bad, average voter

      • gamer@lemm.ee
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        29
        ·
        9 months ago

        Lazy motherfuckers on this site can’t even use proper grammar when being a snarky asshole. That shit you wrote is barely coherent.