This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
Summary
AI summaryFixed HLS init.mp4 generation regression caused by in‑stream codec parameters.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Support interacting with servers having no trickle ICE in WebRTC. Support interacting with servers having no trickle ICE in WebRTC. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Support WHIP ICE restarts in WebRTC. Support WHIP ICE restarts in WebRTC. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Allow dynamic text overlay changes for RPI Camera. Allow dynamic text overlay changes for RPI Camera. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated code.cloudfoundry.org/bytefmt from v0.70.0 to v0.72.0. Updated code.cloudfoundry.org/bytefmt from v0.70.0 to v0.72.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/Masterminds/semver/v3 from v3.4.0 to v3.5.0. Updated github.com/Masterminds/semver/v3 from v3.4.0 to v3.5.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/bluenviron/gohlslib/v2 from v2.3.1 to v2.3.2. Updated github.com/bluenviron/gohlslib/v2 from v2.3.1 to v2.3.2. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/bluenviron/gortmplib from v0.3.1 to v0.3.2. Updated github.com/bluenviron/gortmplib from v0.3.1 to v0.3.2. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/bluenviron/gortsplib/v5 from v5.5.2 to v5.5.3. Updated github.com/bluenviron/gortsplib/v5 from v5.5.2 to v5.5.3. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated golang.org/x/crypto from v0.50.0 to v0.51.0. Updated golang.org/x/crypto from v0.50.0 to v0.51.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated golang.org/x/net from v0.53.0 to v0.54.0. Updated golang.org/x/net from v0.53.0 to v0.54.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated golang.org/x/sys from v0.43.0 to v0.44.0. Updated golang.org/x/sys from v0.43.0 to v0.44.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated golang.org/x/term from v0.42.0 to v0.43.0. Updated golang.org/x/term from v0.42.0 to v0.43.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/cyphar/filepath-securejoin from v0.4.1 to v0.6.1. Updated github.com/cyphar/filepath-securejoin from v0.4.1 to v0.6.1. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/pjbgf/sha1cd from v0.3.2 to v0.6.0. Updated github.com/pjbgf/sha1cd from v0.3.2 to v0.6.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated golang.org/x/text from v0.36.0 to v0.37.0. Updated golang.org/x/text from v0.36.0 to v0.37.0. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Updated github.com/bluenviron/mediamtx-rpicamera from v2.5.6 to v2.5.7. Updated github.com/bluenviron/mediamtx-rpicamera from v2.5.6 to v2.5.7. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Fix compatibility with Verint.Vms.MediaGateway. Fix compatibility with Verint.Vms.MediaGateway. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Prevent crash when ServerStream.Close() is called during stream closure. Prevent crash when ServerStream.Close() is called during stream closure. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix leak during multicast initialization failure. Fix leak during multicast initialization failure. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Prevent nil / unconfigured tracks from appearing in RTMP. Prevent nil / unconfigured tracks from appearing in RTMP. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix error 500 caused by in-stream parameters in HLS. Fix error 500 caused by in-stream parameters in HLS. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix race condition in ServerConn.session teardown. Fix race condition in ServerConn.session teardown. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Fix race condition when tearing down RTSP connection. Fix race condition when tearing down RTSP connection. Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
Full changelog
Fixes and improvements
RTSP
- fix compatibility with Verint.Vms.MediaGateway (https://github.com/bluenviron/mediamtx/issues/5292) (https://github.com/bluenviron/gortsplib/issues/1061)
- fix crash when stream is closing (https://github.com/bluenviron/gortsplib/issues/1062) when ServerStream.Close() is called, stream readers might have their setuppedTransport set to nil, causing the server to crash. Prevent this.
- fix race condition when tearing down connection (https://github.com/bluenviron/gortsplib/issues/1063) ServerConn.session was not properly protected.
- fix leak in case of failure during multicast initialization (https://github.com/bluenviron/gortsplib/issues/1064)
RTMP
- prevent nil / unconfigured tracks from appearing (https://github.com/bluenviron/gortmplib/issues/66) (https://github.com/bluenviron/mediamtx/issues/5724) (https://github.com/bluenviron/mediamtx/issues/5729)
HLS
- fix error 500 caused by in-stream params (https://github.com/bluenviron/gohlslib/issues/355) (https://github.com/bluenviron/mediamtx/issues/5728) (https://github.com/bluenviron/mediamtx/issues/5745) PR https://github.com/bluenviron/gohlslib/issues/344 caused a regression. Many codecs (AV1, H264, H265, VP9) use in-stream parameters, that were not taken into consideration anymore when generating init.mp4 and playlists. This has been solved.
WebRTC
- fix checking POST responses (https://github.com/bluenviron/mediamtx/issues/5758)
- support interacting with servers with no trickle ICE (https://github.com/bluenviron/mediamtx/issues/5273) (https://github.com/bluenviron/mediamtx/issues/5757)
- support WHIP ICE restarts (https://github.com/bluenviron/mediamtx/issues/5183) (https://github.com/bluenviron/mediamtx/issues/5770)
RPI Camera
- support changing text overlay dynamically (https://github.com/bluenviron/mediamtx/issues/5270) (https://github.com/bluenviron/mediamtx/issues/5748)
Dependencies
- code.cloudfoundry.org/bytefmt updated from v0.70.0 to v0.72.0
- github.com/Masterminds/semver/v3 updated from v3.4.0 to v3.5.0
- github.com/bluenviron/gohlslib/v2 updated from v2.3.1 to v2.3.2
- github.com/bluenviron/gortmplib updated from v0.3.1 to v0.3.2
- github.com/bluenviron/gortsplib/v5 updated from v5.5.2 to v5.5.3
- github.com/datarhei/gosrt updated from v0.10.0 to v0.11.0
- github.com/fsnotify/fsnotify updated from v1.10.0 to v1.10.1
- github.com/go-git/go-billy/v5 updated from v5.8.0 to v5.9.0
- github.com/go-git/go-git/v5 updated from v5.18.0 to v5.19.0
- github.com/gookit/color updated from v1.6.0 to v1.6.1
- github.com/matthewhartstonge/argon2 updated from v1.5.2 to v1.5.3
- github.com/pion/rtp updated from v1.10.1 to v1.10.2
- golang.org/x/crypto updated from v0.50.0 to v0.51.0
- golang.org/x/net updated from v0.53.0 to v0.54.0
- golang.org/x/sys updated from v0.43.0 to v0.44.0
- golang.org/x/term updated from v0.42.0 to v0.43.0
- github.com/cyphar/filepath-securejoin updated from v0.4.1 to v0.6.1
- github.com/pjbgf/sha1cd updated from v0.3.2 to v0.6.0
- golang.org/x/text updated from v0.36.0 to v0.37.0
- github.com/bluenviron/mediamtx-rpicamera updated from v2.5.6 to v2.5.7
Security
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MediaMTX
Ready-to-use, zero-dependency real-time media server and proxy to publish, read, record, playback and route video/audio streams over SRT, WebRTC, RTSP, RTMP, HLS, MPEG-TS, RTP.
Related context
Related tools
Beta — feedback welcome: [email protected]