BigBlueButton 2.7.4 → 2.7.9
5 releases · 0 breaking changes · 6 security fixes · 2 advisories fixed
6security0breaking0deprecated6feature42fix
Vulnerabilities fixed by this upgrade
- 3.7 CVE-2024-39302 Some bbb-record-core files installed with wrong file permission
- 4.6 CVE-2024-38518 API Additional Parameters Considered
Breaking changes
None in the release notes.
Security changes
- security [Snyk] Security upgrade rubocop from 1.31.2 to 1.32.0 in 2.7.9
- security fix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4 in 2.7.8
- security build(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q in 2.7.8
- security [Snyk] Fix for 1 vulnerabilities in 2.7.8
- security [Snyk] Fix for 1 vulnerabilities in 2.7.7
- security [Snyk] Security upgrade sanitize-html from 2.7.1 to 2.12.1 in 2.7.5
Every release in between
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr https://github.com/bigbluebutton/bigbluebutton/pull/20385
otherUpdates for project BigBlueButton v2.7 HTML5 client and language uk_UA
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ca
otherUpdates for project BigBlueButton v2.7 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language gl
otherUpdates for project BigBlueButton v2.7 HTML5 client and language et
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fi
otherUpdates for project BigBlueButton v2.7 HTML5 client and language es_ES
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ru
fixfix: only allow POST for insertDocument in UrlMappings.groovy [2.7]
fixfix(API): Allow additional parameters in content type headers
featurefeat (backport 2.7): Introduces allowPromoteGuestToModerator config
otherbuild(fix): File permissions in packages should not depend on umask of build system
fixfix(recording): Add participants, raw size, and playback size information to video metadata
security[Snyk] Security upgrade rubocop from 1.31.2 to 1.32.0
otherchore: npm audit fix for learning dashboard
otherdocs: Make clear in docs that parameters are case sensitive.
otherdocs: Various fixes by @MBM1607
otherdocs: adjust correct default value for breakouts being recorded
otherdocs(GL): correct statements about presentations not being migrated and how to fix entity too large errors
otherdocs: Clarify that allowPromoteGuestToModerator is a CREATE parameter by @antobinary in #20559
fixfix(whiteboard): Inconsistent Zoom Between Live Session And Recording
fixfix(whiteboard): Disable Duplication Shortcut Key While Drawing
otherUpdates for project BigBlueButton v2.7 HTML5 client and language eu
securityfix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4
otherrefactor(bbb-web): Add message key to insertDocument responses
securitybuild(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q
security[Snyk] Fix for 1 vulnerabilities
othertest: [Snyk] Security upgrade jest from 27.5.1 to 29.0.0
otherdocs: drop plugin @cmfcmf/docusaurus-search-local
fixfix(poll): avoid rendering polling component twice
fixfix: breakout styles
fix[2.7] fix(reactions): crash when interactionsButton coords are absent
other[2.7] fix(audio): acquire streams before negotiation when peer is answerer
fix[2.7] fix(bbb-html5): crash when stopping WebRTC peers
fix[2.7] fix(bbb-html5): crash due to undefined metadataProp access
feature[2.7] fix(screen-reader): add safeguards for adding alerts
fix[2.7] fix: crash due to invalid UA version number in WKWebView (backport)
other[2.7] fix(audio): minimize redundant audio exit toasts
feature[2.7] fix: add safeguards when returning user roles
fix[2.7] fix(bbb-html5): crash on video-provider unmount
fixfix(whiteboard): check before manipulating pan tool class list
fixFix: user reaction not showing right emoji
fixfix: undefined accesses causes crashes in actions-bar breakout utils
fixfix(audio): review device selection in mobile endpoints
fixfix: crash at meeting-ended due to undefined access + incorrect meetingID
other[2.7] fix(audio): review audio modal help screen
fixfix(audio): broken connection stats on Firefox >= 125
other[2.7] Support more transcription languages
other[2.7] fix(presentation): toolbar width on small screens
fixfix(bbb-html5): validate before getting user-list element attribute by @Arthurk12 @prlanzarin
fixfix(bbb-html5): filter poll users array before processing by @Arthurk12 @prlanzarin
fixfix(bbb-html5): potential crash in Youtube captions toggle by @Arthurk12 @prlanzarin
fixfix(bbb-html5): correct parameter type for wake lock log codes by @Arthurk12 @prlanzarin
otherchore: Bump requirement for safari versions
otherchore: bump npm deps
otherUpdates for project BigBlueButton v2.7 HTML5 client and language tr https://github.com/bigbluebutton/bigbluebutton/pull/20165
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language eu
otherUpdates for project BigBlueButton v2.7 HTML5 client and language zh_TW
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr https://github.com/bigbluebutton/bigbluebutton/pull/20065
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ar https://github.com/bigbluebutton/bigbluebutton/pull/20126
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ja https://github.com/bigbluebutton/bigbluebutton/pull/20169
otherUpdates for project BigBlueButton v2.7 HTML5 client and language el_GR https://github.com/bigbluebutton/bigbluebutton/pull/20131
otherUpdates for project BigBlueButton v2.7 HTML5 client and language de https://github.com/bigbluebutton/bigbluebutton/pull/20146
fixfix(sec): Bump org.json:json (backport)
fixfix(sec): Bump tomcatEmbed to 9.0.86 (#19814) (backport)
fixfix(sec): Bump logback-classic (backport)
fixfix(bbb-export-annotations): Flag to force CairoSVG to embed images
security[Snyk] Fix for 1 vulnerabilities
+2 more items in the release notesfixfix(locale): Remove duplicate localization row
fixfix(client): undefined currentUserAway
otherUpdates for project BigBlueButton v2.7 HTML5 client and language el_GR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ar
otherUpdates for project BigBlueButton v2.7 HTML5 client and language de
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ja
other[2.7] build(bbb-webrtc-sfu): v2.13.2
other[2.7] build(bbb-webrtc-recorder): v0.7.0
other[2.7] build(bbb-webrtc-sfu): v2.13.3
otherbash script reads /etc/turnserver.conf to get realm and secret.
fixfix(bbb-html5): customHeartbeat would not close stale sessions, +
otherrefactor: End meeting button tweaks
fixfix: Drop heavy log from sendBulkAnnotations.js
security[Snyk] Security upgrade sanitize-html from 2.7.1 to 2.12.1
fixfix(layout): defaultLayout join parameter
otherrefactor: Changes to layout toast's workflow
fixfix: Incorrect hover style on the upload presentation button in the polling menu (2.7)
fixfix: Upload the exported users list to presentation breaks the whiteboard
fixfix: Download presentation popup window is broken
fixfix(bbb-html5): Use CDN for resource of layouts
fixfix: Avoid presentation conversion causing a crash
fixFix: Modal of the inactivity inspection does not show up
othertest: update playwright tests to support sha256 and sha512 algorithms
otherUpdates for project BigBlueButton v2.7 HTML5 client and language sv_SE
otherUpdates for project BigBlueButton v2.7 HTML5 client and language hu_HU
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr #19594 #19740
otherUpdates for project BigBlueButton v2.7 HTML5 client and language nb_NO
otherUpdates for project BigBlueButton v2.7 HTML5 client and language lt_LT
otherUpdates for project BigBlueButton v2.7 HTML5 client and language pt
other[2.7] build(bbb-webrtc-recorder): v0.6.0
otherbuild(bbb-webrtc-sfu): v2.12.2
otherUnset all local variables
otherbuild(export-annotations): Add dependency poppler-utils
featurefeat(config): add checkSumAlgorithmForBreakouts in akka-apps (port)
fixfix(sec): bump postgresql to 42.7.2
fixFix (akka-apps) (2.7): Config from /etc not being read when running through sbt reStart
fixfix: Reduce logs in SendWhiteboardAnnotationPubMsgHdlr.scala
other!fix(captions): disable recording event TranscriptUpdatedEvent
fixfix: Several Gladia transcription fixes
featurefeat: Record raiseHand, away and Reaction events (backport)
otherrecording: work around invalid locale in caption events
fixfix(bbb-export-annotations): handle missing textbox size in Tldraw
featurefeat(config): Add option to disabled "Download session data" on Learning Dashboard (backport)
otherdocs: Close code block in customize md
otherdocs: Tweaks to gladia io docs
otherdocs: capitalize Support title
otherdocs: drop old links #18295 from wilkis3/wilkis3-doc-admin-install-links (backport)
otherdocs: Update FreeSWITCH configs - Nine digits PIN