BigBlueButton 3.0.39 BigBlueButton 3.0.39 is a maintenance release focused on bug fixes. Recording fixes hide every camera of a locked user in recordings and stop the presentation from being blanked on screenshare-as-content, and the annotated presentation export received several rendering fixes. This release also orders the guest lobby list by time of arrival, allows locked users to see moderator…
This iteration of BigBlueButton 4.0 contains security fixes only. We encourage administrators to update! More details included in the advisories below. Note, if they are not yet public when reading this, check a bit later. Command Injection through "destination_number" https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-f6gw-hpfv-5gxg Unauthenticated access to a meeting's audio…
This iteration of BigBlueButton 3.0 contains security fixes only. We encourage administrators to update! More details included in the advisories below. Note, if they are not yet public when reading this, check a bit later. Command Injection through "destination_number" https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-f6gw-hpfv-5gxg Unauthenticated access to a meeting's audio…
BigBlueButton 4.0.0-rc.3 BigBlueButton 4.0.0-rc.3 is a stabilization release ahead of 4.0.0. The one new feature is on the whiteboard, where the mouse wheel behaviour is now configurable, letting administrators restore the pre-4.0 direct wheel-zoom. Most of the iteration is fixes — an in-depth pass over LiveKit reconnection, recovery and resiliency, several bbb-web hardening changes around name le…
This iteration of BigBlueButton 3.0 contains security fixes only. We encourage administrators to update! Note, we drop support for SIP.JS audio (/ws) here as part of one of the patches. BigBlueButton 4.0 already had it dropped. A corresponding change in bbb-install.sh (v3.0.x-release branch) was made too. For those using custom installers, make sure /usr/share/bigbluebutton/nginx/sip.nginx is not…
This iteration of BigBlueButton 4.0 contains security fixes only. We encourage administrators to update! More details included in the advisories below. Note, if they are not yet public when reading this, check a bit later. Core Cross-Meeting Presentation Injection Due to an Unbound Upload Token https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-9v52-vhvw-4w5c Cross Meeting Pag…
BigBlueButton 4.0.0-rc.1 BigBlueButton 4.0.0-rc.1 is the first release candidate for 4.0. Audio and LiveKit work dominates this iteration: the LiveKit bridge gains multi-room sessions with a membership-based token model (including automatic token refresh), breakout listen-in reaches parity with the FreeSWITCH/mediasoup transfer flow, and the "LiveKit as the audio state source" refactor lands with…
BigBlueButton 3.0.36 BigBlueButton 3.0.36 adds support for custom text in the recording permission dialog, letting you append your own message to the recording consent prompt via the new notifyRecordingAppend create parameter. Under the hood, this iteration upgrades the JVM components to Java 21 and FreeSWITCH to 1.11.3, and includes fixes to chat export and akka-apps database batching. The rest o…
BigBlueButton 4.0.0-beta.5 BigBlueButton 4.0.0-beta.5 brings a mobile layout overhaul (paginated webcams, compact bars, responsive dialogs, and side-by-side cameras and presentation on phones in landscape) along with automatic light/dark theme switching via prefers-color-scheme. Audio work continues with a new dedicated Audio settings tab, push-to-talk enabled in settings.yml, and better BBB<->Liv…
This iteration of BigBlueButton 3.0 contains security fixes only. We strongly encourage administrators to update! In addition to updating to this patched version, we encourage administrators to switch to BlockNote shared notes and we proactively rotate the API secret via bbb-conf --setsecret https://docs.bigbluebutton.org/administration/bbb-conf/#--setsecret-new_secret More details included in the…
BigBlueButton 3.0.33 BigBlueButton 3.0.33 adds Markdown export, import, and initialization for shared notes (blocknote only), configurable button styles for plugins, and a real Panopto player for external video sharing. It also improves BigBlueButton↔LiveKit audio state reconciliation on reconnects and collects a broad set of HTML5 client fixes — camera dock layout, presentation downloads, slide r…
BigBlueButton 3.0.34 chore: Update BigBlueButton release version to 3.0.34 by @antobinary in 66f94cf No "real" code changes in 3.0.34. However, some of the packages have been recreated due to a sync issue with jammy-300 packaging repository a couple of hours ago when releasing BBB 3.0.33's packages. Full Changelog: v3.0.33...v3.0.34 Release name Passing -v jammy-300 to https://github.com/bigbluebu…
This beta defaults BigBlueButton's media stack to LiveKit (with the legacy SIP.js audio bridge removed), makes BlockNote the default shared notes engine (now with Markdown export, init-from-markdown, and an import modal), and upgrades the JVM libraries and applications to Java 21. Other highlights include search, pin management, and a list/grid view toggle in the apps gallery, a new design for sid…
BigBlueButton 3.0.32 includes accessibility improvements, whiteboard fixes and dependency updates. Below is a list of the pull requests in this iteration, grouped by component. Link to installation command / instructions / schedule / planned features: https://docs.bigbluebutton.org/3.0/new-features Big THANK YOU to all community members who helped for this release - both through sending pull reque…
BigBlueButton 3.0.31 includes client fixes and new client setting to disable displaying guest lobby position. Below is a list of the pull requests in this iteration, grouped by component. Link to installation command / instructions / schedule / planned features: https://docs.bigbluebutton.org/3.0/new-features Big THANK YOU to all community members who helped for this release - both through sending…
BigBlueButton 3.0.30 adds the ability to disable specific recording formats on a per-meeting basis, new plugin actions to stop screen sharing and upload presentations, and hides the session token from the browser's address bar. The release also includes several recording stability and memory-usage fixes and accessibility improvements. Below is a list of the pull requests in this iteration, grouped…
This iteration of BigBlueButton 3.0 contains security fixes only. We strongly encourage administrators to update! (note: if some of the advisories below are not yet loading, they are yet to be published) Core fix: Block embeddable shape types in whiteboard annotations by @Tainan404 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-h2rp-mcch-vgh9 fix(bbb-web): Reject GET-Only…
This iteration focuses on breakout rooms. Moderators can now manage lock settings inside breakout rooms and optionally inherit the parent meeting's lock settings, and recording parameters now pass through to breakouts. It also adds new LiveKit forceRelay/forceRelayOnFirefox settings, accessibility improvements for the settings dropdown and the BlockNote shared-notes editor, a recording fix for hig…
BigBlueButton 4.0.0-beta.3 This beta brings a significant Layout System revamp (defaulting to the Unified layout, refined camera sorting and pagination, and a new multi-functional mode with dual sidebar panels). Other highlights include a new WASM-based audio processor (BBBA) running on top of the mic stream, user search in the user list, a redesigned lock-settings modal with a 3-state presenter p…
This iteration of BigBlueButton 3.0 brings a new feature allowing users to pan outside the current presenter's view during infinite whiteboard sessions, along with presentation improvements (callback URL validation, session/page token enforcement on presentation requests), recording fixes, and several BlockNote-related performance and stability improvements. Note: anyone using a local address as t…
This iteration of BigBlueButton 3.0 contains fixes to BlockNote shared notes (export in cluster setups, placeholder layout, and a new static toolbar), LiveKit dial-in audio, whiteboard touch handling, and a fix to make bbb-web respond to /create before downloading pre-uploaded presentations. Documentation has been expanded. Below is a list of the pull requests in this iteration, grouped by compone…
This iteration of BigBlueButton 3.0 contains multiple client improvements, notably in whiteboard cursor handling, LiveKit integration, and breakout rooms. It also introduces BlockNote shared notes integration and plugin SDK enhancements. A new create parameter clientSettingsOverrideJsonUrl allows for overriding the client configuration via url. Note: we have identified and removed some obsolete se…
This iteration of BigBlueButton 3.0 contains security fixes only. We encourage administrators to update! Core Missing authorization allows viewer to inject/overwrite captions GHSA-q387-2q28-mg33 Open Redirect on bigbluebutton through bigbluebutton/api/join via get-parameter "logoutURL" GHSA-cvwj-4pcp-f3g8 Full Changelog: v3.0.23...v3.0.24 Release name Passing -v jammy-300 to https://github.com/big…
This iteration of BigBlueButton 3.0 contains multiple client and core improvements, most notably in breakout rooms. Several direct security fixes are included. We encourage administrators to update! Note: insertDocumentBlockedHosts and insertDocumentSupportedProtocols bbb-web properties were renamed, check below for more info. Below is a list of the pull requests in this iteration, grouped by comp…