GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Update FFmpeg to 9.0.2, build own OpenSSL on manylinux_2_28, Docker images 20261111 by avdivan · Pull Request #1288 · opencv/opencv-python

Conversation

avdivan commented Nov 11, 2026

Copy link

Copy Markdown

Contributor

Changes

FFmpeg 8.1.3 → 9.0.2 in all Linux Docker images (manylinux2014, manylinux_2_28, musllinux_1_2; x86_64 and aarch64).
Includes Build own OpenSSL on manylinux_2_28 instead of using system package #1281 by @tvasenin (authorship preserved): manylinux_2_28 images build OpenSSL 1.1.1w from source into /ffmpeg_build instead of using the system openssl-devel package. The system package on AlmaLinux 8 is the Red Hat FIPS build (1.1.1k); after auditwheel bundles and patches it, its HMAC selftest fails on FIPS-enabled hosts (OpenSSL FIPS selftest failure when importing cv2 on FIPS-enabled systems #1191). This matches what manylinux2014 and musllinux already do.
Docker image tags updated to 20261111 in build_wheels_manylinux.yml.

All 6 images are built and pushed to quay.io/opencv-ci. Verified in each one: libavcodec/libavformat 63.1.102, libssl/libcrypto resolved from /ffmpeg_build/lib, no unresolved dependencies.

Draft: blocked on OpenCV submodule

OpenCV 4.14.0 (current submodule) does not build against FFmpeg 9. The fix is opencv/opencv#29533, merged to 4.x on 2026-08-11. Linux wheel CI is expected to fail until the opencv submodule is bumped to include it. @asmorkalov, should this go together with the next OpenCV submodule update, or should I bump the submodule in this PR?

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

tvasenin and others added 3 commits

November 11, 2026 12:09


          Build own OpenSSL on manylinux_2_28 instead of using system package

a0ae2a3

Fixes FIPS SELFTEST FAILURE on FIPS-enabled non-RHEL systems (opencv#1191)


          Update FFmpeg to 9.0.2, Docker images to 20261111

c59f063


          Link OpenSSL statically into FFmpeg on manylinux_2_28

b103b97

A shared libcrypto.so.1.1 in /ffmpeg_build/lib (registered via ldconfig)
shadowed the system Red Hat OpenSSL with the same soname, breaking system
tools: git-remote-https failed with 'undefined symbol: EVP_KDF_ctrl' in
libk5crypto.so.3. Static linking keeps the system OpenSSL intact and still
avoids bundling the Red Hat FIPS libcrypto into wheels (opencv#1191).

This branch has not been deployed

No deployments

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.