Godot Daily: Security Library Blitz and Web Audio Fixes
A wave of third-party updates for Brotli, FreeType, HarfBuzz and others patches active security CVEs across master and 3.x, while a major web audio fix closes nine reports. Smaller editor, UI, and platform corrections round out the day.
Duration: PT2M57S
Episode overview
This episode is a short developer briefing from Godot Daily.
It explains recent repository work in plain language.
- Show: Godot Daily
- Published: 2026-10-30T06:03:18Z
- Audio duration: PT2M57S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's October 30th, 2026, and this is Godot Daily.
Our lead today is security. Nearly half of all merged work is third-party library updates patching actively tracked vulnerabilities, landing simultaneously on master and older maintenance branches.
First, that dependency sweep. On master, pull request 124775 updates Brotli to version 1.2.1 to fix CVE-2026-111497, an out-of-bounds write described as allowing remote code execution. Pull request 124645 updates FreeType to 2.15.0, including a fix for CVE-2026-95512, and pull request 124840 moves HarfBuzz to 15.0.0…
Second, web audio reliability. Pull request 123996 closes nine linked issues and proposals for the sample audio driver. M-P-3 and Ogg Vorbis streams now report position in expected samples based on the server mix rate, and the Audio Worklet correctly accounts for playback rate when tracking position. If you ship web…
Finally, interaction and editor correctness. Pull request 124943 fixes item list arrow keys going dead after incremental search. Pull request 124915 makes quaternion cubic interpolation symmetric for forward and backward animation playback. Pull request 123682 removes repeated full sorts that slowed…
Wh…
Nearby episodes from Godot Daily
- Weekly Recap - Security Updates and Playback Stability
- WebSocket and Metal Stability Fixes
- Rendering Correctness, Debugger Honesty, Threading Fix
- Rendering Debug Push and Security Backports
- Silent Failures, Security Trust, and Editor Friction Fixes
- Container Safety, Editor Reliability, and Rendering Fixes
- Editor Course Correction, Rendering and Core Stability
- Weekly Recap - XR Reliability and Editor Polish