v1.21.0 v1.21.1
bluenviron/mediamtxSep 5, 2026 → Sep 20, 202615 days between releases
What's New
Security hardening for browser POST and WebRTC/HLS fixes
Breaking Changes
- Browser POST requests without a valid allowed origin are now blocked by the server.
New Features
- Added ability to exclude interfaces in WebRTC settings.
- HLS server now manages sessions independently of muxers.
Improvements
- Enforces allowed origin validation for browser POST requests to prevent unauthorized access.
- HLS session management improved for better performance and error handling.
- Enhanced H.265 DTS extraction.
- Support for MP4 tracks without edit boxes.
Bug Fixes
- Fixed AV1 playback issues by stripping padding.
- Resolved decoding errors with DJI drone streams.
- Fixed H.265 DTS extraction of streams with long-term reference pictures.
- Fixed seek errors in MP4 payload reading.
Upgrade Notes
Ensure your browser clients send valid `Access-Control-Allow-Origin` headers, as the server will now block POST requests without them. This change does not require configuration updates but may impact client-side functionality.
The Two Releases
v1.21.0
Sep 5, 2026· 2 months ago
This release introduces Media-over-QUIC as a major new feature, enabling stream forwarding via the QUIC protocol. It also includes significant API enhancements, improved security measures regarding CORS and configuration validation, and various fixes across RTSP, RTMP, and WebRTC protocols. Additionally, support for the deprecated Debian Bullseye operating system has been dropped.
Full release notesv1.21.1
Sep 20, 2026· 1 month ago
This release introduces security hardening for browser POST requests, improves HLS session management for better performance, and resolves various playback issues including AV1 padding and DJI drone stream compatibility.
Full release notes