Skip to main content

22.12

Important Security Bug-fix Release

Severity: Moderate

Several JDK CVE CVE-2023-0482 (Fixed in Resteasy 4.7.8) CVE-2023-0482 (Fixed in Resteasy 4.7.8)

Server health service

  • The internal health service, accessible at /fsi/service/healthcheck, now uses much more internal checks to determine the overall health of the server.
  • The container healthcheck was adapted according to the changes and now triggers a restart of the container more quickly.

Rename and metadata

Fixed an issue with extra metadata added via the API not being moved in case of renaming or moving the source data.

Exit on start-up

Fixed a server exit at startup when the server was started with an incomplete storage.

Archive support

The unpacking of archives (TAR, BZ2) has been accelerated.

Static file responses for video files

When delivering video files in particular, the byte-range support has been changed. . For the video container formats mov, m4v und mp4, only the first chunk is delivered for requests with range headers. This massively reduces the traffic for video playback.

Bug if Apache Solr was disabled

If Apache Solr was disabled as the search database, an exception could occur when deleting directories. This problem has been fixed.

Storage import order

The internal job queue that determines when images are converted for the storage has been completely re-implemented. As a result, queue processing is significantly accelerated when API uploads and file system changes occur simultaneously. The RAM memory requirements have also been significantly reduced.

WebP encoder

A new WebP encoder based on libwebp 1.3.0 was implemented. The following encoder parameters are deprecated:

info Parameter deprectation
  • snsStrength
  • filterSharpness
  • filterStrength
  • preProcessing
  • multiThreads

Log output when the server is stopped

Log output for the ListBuffer indicating an error when the server was terminated has been removed. This was not an error.

Uniform time specifications for logging

The output of dates and time ranges has been unified in all log outputs and are now human-readable.

Storage Performance

If many files in many directories are changed, then the speed to mirroring the directory structure in storage is now much better.

Directory Cache

The internal cache for the directory structure is now more limited based on the available RAM memory.

Fallback Images

Rendered fallback images did not have a cache-control header under certain circumstances. This problem has now been fixed.

FSI Layers

It's now possible to also use regular HTML content (e.g. text or videos) in FSI Layers

added parameters:

  • contentInBackground - defines if content is set in background

changed API functions:

  • addGroup(strParentGroupName, oParameters, (index or layer name))
  • addLayer(strParentGroupName, oParameters, (index or layer name), (HTML content))
  • move(layerName, targetGroup, (target index or layer name))

22.09

Critical Security Bug-fix Release

Severity: High

CVE-2021-43980 (fixed in Tomcat 9.0.62)
CVE-2021-44832 (fixed in log4j2 2.17.1)
Several JDK CVE
Increased Salt Bits for login digest method

Bump to Java 17 LTS

This version uses Java 17. Parts of the source code have been updated according to the possibilities of Java 17. Slight performance advantages could be measured in internal benchmarks.

Error if histogram generation is disabled

Conversion errors could occur if histogram creation was disabled or could not be performed.

Fix disk usage performance and sizing bug

The display of the capacity of the disk for storage was incorrect and has been fixed. The speed at which this was determined has been significantly improved.

Added some additional image formats

We have expanded the number of supported source image formats and from this version we support the following formats:

info

JPEG - Joint Photographic Experts Group
TIFF - Tag Image File Format
GIF - Graphics Interchange Format
PNG - Portable Network Graphics
PSD - Photoshop document
WEBP - Google WebP Format
BMP - Bitmap File Format
FPX - FlashPix
PBM - Portable Anymap
PICT - macOS image format
PCX - Picture exchange
IFF - Interchange File Format
HDR - Radiance High Dynamic Range RGBE Format
TGA - Truevision TARGA
SGI - Silicon Graphics Image Format

Image type recognition

Recognition for certain image formats has been revised and accelerated. Especially the initial scan after a reboot benefits from this improvement.

Directory images

Fixed a problem with very small images in the Web Interface view of directories.

Fix Alpha-Channel bug

For images without ICC color profile, the transparency channel could be rendered incorrectly. This occurred especially with PNG images with linear RGB ICC.

21.12

Critical Security Bug-fix Release

Severity: High

CVE-2021-44228 (Log4Shell - fixed in 2.15.0)

This release only fixes the Log4Shell security issue.

21.11

Important Security Bug-fix Release

Severity: High

CVE-2021-44228 (Tomcat - fixed in 9.0.54)

Two-factor authentication (2FA)

Since this release, users can activate a TOTP (Time-based One-time Password algorithm) factor to their password. The 2FA factor complies with RFC 6238 and can be used with the usual programmes for this purpose, e.g. Google Authenticator, KeePassXC, Botan, iOS 15, etc.

Refresh JPEG Encoder

Use of a new JPEG encoder that slightly improves encoder performance.

SwitchUser API

The API for changing the user via the web interface has been completely re-implemented. However, the API requests themselves do not change.

Fallback Redirects bug

Fix bugs with static redirected fallback images.

PNG Format bugfix

Fix wrong colors with some PNG images in rare Channel/ICC combinations.

Import Queue improved

Reduce used memory per importer job and increased job queue. As a result, the storage is filled more evenly.

FSI Pages

added parameters:

  • flipCornerSize - Defines the size of the draggable corner of each page
  • flipEdgeSize - Defines the size of the draggable edge of each page

21.05

Important Security Bug-fix Release

Severity: High

CVE-2021-30639 (Tomcat - fixed in 9.0.45)
CVE-2021-41079 (Tomcat - fixed in 9.0.44)
CVE-2021-25122 (Tomcat - fixed in 9.0.43)

Fix possible expire problem with new licenses

Fixed an issue that could cause the licence to expire prematurely. This only applied to time limited licences.

Update CORS filter

The handling of CORS requests has been reimplemented. Fixed wildcard origins bugs.

Reduce log level for invalid effects

Too many irrelevant log outputs were logged for invalid effect requests. The log outputs have been adjusted.

Fix WebP problems

Excessive memory consumption with very large WebP encodings has been fixed.

Fix problem with slow uploads

Fixed a bug that prevented images that uploaded very slowly from being imported.

Static Request Settings

Support for the size of the chuck in byte range requests for static assets has been added and separated timeout for static requests.
Parameter: generalSettings.application.requestStaticChunk
Parameter: generalSettings.application.requestStaticTimeout

Logging

Added environment variables to change log verbosity.
Variable: LOG_FSI_LEVEL
Variable: LOG_ROOT_LEVEL

The used memory is now displayed in detail per job.

Supported operating system

Removed support for running FSI Server directly under MacOS X (x86).

Live data view

Fix problem with display the correct import queue lenght.

PNG images

Fix issues with PNG encoded images with palettes and no transparency channel.

Health Service

The internal health thread use now a mockup renderer to determine out-of-memory issues during runtime.

Add support for static fallback images

It's now possible to use static redirects as 404 fallback images.

Response header X-Dim

Fix issue (wrong value) with X-Dim response header.

Bugfix format scanner

Fixed a recognition bug in format scanner, if magic format scanner was enabled.

FSI Layers

Added viewer FSI Layers.
HTML5 and Javascript based viewer to display multiple images or html elements as stacked layers which can be configured.

20.11

Feature Release

JDK: 11.0.9
Tomcat: 9.0.40

Important Security Bug-fix Release

Severity: High

CVE-2021-24122 (Tomcat - fixed in 9.0.40)

Extend response headers

Added X-Content-Length and X-Dim headers to image requests. Useful for JS-based image viewers.

Fix importer issue

  • Fixed possible deadlock when import queue was full.
  • Reorg of ordering when big images converted to the storage.

Fix header cache problems

  • Fixed issue with incorrect invalidation of internal header cache. Could result in an incorrect Content-Length header.
  • Removed usage of header cache for batch jobs

FTL Templates

XML-based FTL templates had inconsistent line breaks.

Animated GIF

  • Fixes a problem with non-existent images, when a GIF animation should be created from a picture sequence.
  • Fix issue when image has different resolutions.

Template compatibility

  • Added compatibility for old request with tpl=info requests instead of info.xml
  • Removed FTL compression in all included templates

File operations

Fixed file operation issues from static to storage connectors.

I/O concurrency

Changed default value for "2" to "auto". The optimum value is determined according to the CPU cores.

Aborted HTTP connections

Fixed timeout issues when client request is aborted.

Server halt

Decreased stopping time if server under load. At very high load, stopping could exceed the Tomcat Stop Timeout.

Performance peaks

Increased the maximum of possible threads for image rendering.

Image converter

  • Fixed an issue when BMP images converted. Possible annoying log message removed.
  • Fixed error with some 16-bit / channel images.
  • Increased memory usage per converter thread
  • Changed memory usage calculation per job

PNG reader

Improved memory usage for the PNG image reader

EULA

Added EULA agreement to the web interface.

20.07

Feature Release

JDK: 11.0.8
Tomcat: 9.0.37

Important Security Bug-fix Release

Severity: High

CVE-2020-13935 (Tomcat - fixed in 9.0.37)
CVE-2020-11996 (Tomcat - fixed in 9.0.36)
CVE-2020-9484 (Tomcat - fixed in 9.0.35)

License test

Changed status code if API license test failed. Before this version the code was 500 and from now on it is 400.

Static connector

Session authentication check with static connectors improved.

PNG Reader

PNG images with wrong ICC profiles (CMYK instead of RGB) is now ignored.

Fallback images per source connector

Added errorImage and importingImage to connectors. You can now define fallback images per connector.

Memory allocation

Added pooling for recurring memory allocations.

Import effects

Fixed incorrect saving of image dimensions when using import effects such as trim.

Import scanner

Decreased the startup and per-round delay for directory scanning. Increased scanning interval in low activity situations.

Time limited licenses

Licence expiry dates now have a little extra time buffer.

Alpha channels

Fixed color issue with some pre-calculated alpha channels.

Encoder auto-negotiation

Fixed negotiation of image encoding with format=auto of old Internet Explorer browsers.

Shutdown

Fixed null pointer exception on shutdown.