v1.13.3 v1.21.2
bluenviron/mediamtxSep 23, 2026 → Oct 8, 202616 days between releases
What's New
Upgraded to Go 1.27 and fixed critical UDP packet dropping and security vulnerabilities.
New Features
- Complete RTP/JPEG implementation with support for restart headers.
- Support SEI recovery point in H264 DTS extractor.
- Support FLV video command frames in RTMP reader.
- Use 'catalog' as catalog track name in Media-Over-QUIC.
Improvements
- Prevent unauthorized playback access with legacy credentials.
- Optimize JWT authentication by skipping JWKS fetch when no token is provided.
- Fix race conditions and deadlocks in API and RTSP session management.
- Enhance H264/H265 support by filtering non-standard SEI units.
Bug Fixes
- Fix dropping UDP packets during connection close.
- Fix YouTube RTMPS URL.
- Prevent free access to playback server in case of legacy credentials.
Upgrade Notes
Requires Go 1.27 to build. Legacy credentials now restrict playback server access to users defined in readUser/readPass.
The Two Releases
v1.13.3
Sep 23, 2026· 29 days ago
This release introduces the ability to expose run health metrics and inline report assets, improving test observability and reporting capabilities.
Full release notesv1.21.2
Oct 8, 2026· 13 days ago
This release focuses on stability and security, addressing critical bugs such as UDP packet dropping during connection close, race conditions in the API, and authentication logic issues with legacy credentials. It also includes updates to the Go runtime and various dependencies.
Full release notes