BigBlueButton 2.7.7 → 2.7.16
9 releases · 0 breaking changes · 11 security fixes · 2 advisories fixed
11security0breaking0deprecated8feature40fix
Vulnerabilities fixed by this upgrade
- 3.7 CVE-2024-39302 Some bbb-record-core files installed with wrong file permission
- 4.6 CVE-2024-38518 API Additional Parameters Considered
Breaking changes
None in the release notes.
Security changes
- security [Snyk] Security upgrade meteor-node-stubs from 1.2.10 to 1.2.12 in 2.7.16
- security [Snyk] Security upgrade axios from 1.7.7 to 1.7.8 in 2.7.16
- security export-ann: [Snyk] Security upgrade axios from 1.7.4 to 1.7.8 in 2.7.16
- security [Snyk] Security upgrade axios from 1.6.4 to 1.7.4 (test) in 2.7.13
- security [Snyk] Security upgrade axios from 1.6.4 to 1.7.4 in 2.7.13
- security [Snyk] Security upgrade @docusaurus/preset-classic from 3.0.1 to 3.5.0 in 2.7.13
- security [Snyk] Security upgrade axios from 1.6.4 to 1.7.4 (export-ann) in 2.7.13
- security [Snyk] Security upgrade rubocop from 1.31.2 to 1.32.0 in 2.7.9
- security fix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4 in 2.7.8
- security build(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q in 2.7.8
- security [Snyk] Fix for 1 vulnerabilities in 2.7.8
Every release in between
security[Snyk] Security upgrade meteor-node-stubs from 1.2.10 to 1.2.12
fixfix: Snapshot of slide shows only annotations but no image
otherchore(sec): bbb-html5 npm audit
fixfix(webcam): add option to skip initial enumerateDevices
fixfix(webcam): add rollback to video-preview gUM, improve logs
fixfix: Apostrophe character not displayed correctly in guest panel [2.7]
security[Snyk] Security upgrade axios from 1.7.7 to 1.7.8
othertest: [Snyk] Security upgrade axios from 1.7.4 to 1.7.8
othertest: adds the reactions tests for 2.7
otherUpdates for project BigBlueButton v2.7 HTML5 client and language nb_NO
otherUpdates for project BigBlueButton v2.7 HTML5 client and language gl
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ko_KR
fixfix(bbb-web): Check to see if moderator has left in moderator count
otherchore(sec): bump embedded tomcat to 9.0.96
otherchore(sec): bump tika (mime type detection) to 3.0.0
otherRefactor(bbb-web): Remove unnecessary pagination data and fix total elements bug
otherbuild(bbb-webrtc-sfu): v2.16.1
other[2.7]build: update link to download FS sounds.tar.gz
securityexport-ann: [Snyk] Security upgrade axios from 1.7.4 to 1.7.8
fixfix: Check if user is found before looking up role
fixfix (LAD/cluster) (backport 2.7): Enable LearningDashboard cookie support across different subdomains
fixfix (html5): prevent error if learningDashboardBase is missing
otherUpdates for project BigBlueButton v2.7 HTML5 client and language nb_NO
otherdocs: clarify on LAD default value comment
otherdocs: Update url for LAD in cluster proxy setup
fixfix: Space out approval of guests to better handle larger groups
othertest: Override default presentation on CREATE meeting API call
othertest: breakout room with different presentations
othertest: Prevent user from posting public chat
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
other[2.7] build(bbb-webrtc-sfu): v2.16.0
otherConsistently call docker with sudo privileges (2.7 backport)
otherbuild: Umask fixes for 2.7 build scripts
otherdocs: allowPromoteGuestToModerator documentation tweak [2.7]
featurefeat: add WebRTC stats information to client logs
featurefeat: add experimental support for ICE restart
fixfix(audio): change unmute/unhold flow to work around FS unmute stutter
fixFix: Conference PIN (phone dial-in) doesn't show the needed pound sign in popup
fixfix(users-context): phantom user
fixfix: disable ICE restart for recvonly endpoints
fixfix(whiteboard): Update shape restriction logic
fixfix: Correct cursor position calculation for touch events by @KDSBrowne in #20748
otherchore: update link to which locales are supported by Gladia
otherchore(client): Security upgrade axios, meteor-node-stubs
otherchore(client): Add logs for recording notify action
othertest: removing temporally external video test from ci
othertest: Backporting timer/stopwatch test to 2.7
othertest: backport test disable self-view
othertest: Backport share camera as content test to 2.7
security[Snyk] Security upgrade axios from 1.6.4 to 1.7.4 (test)
security[Snyk] Security upgrade axios from 1.6.4 to 1.7.4
othertest: Update timer test to avoid false failures + fix hide presentation param on unrelated tests by @antonbsa in #21190
othertest: add test webcam background by passing URL by @gabriellpr in #21007
otherUpdates for project BigBlueButton v2.7 HTML5 client and language pt_BR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ja
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ca
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ru
otherUpdates for project BigBlueButton v2.7 HTML5 client and language hu_HU
otherUpdates for project BigBlueButton v2.7 HTML5 client and language gl
otherUpdates for project BigBlueButton v2.7 HTML5 client and language cs_CZ
other[2.7] build(bbb-webrtc-sfu): v2.14.2
other[2.7] build(bbb-webrtc-sfu): v2.15.0
other[2.7] build: Bump bbb-pads to 1.5.3
otherchore: upgrade FreeSWITCH to 1.10.12 (port)
otherbuild: Require libmagickcore-6.q16-6-extra for export-annotations by @antobinary in #21216
security[Snyk] Security upgrade @docusaurus/preset-classic from 3.0.1 to 3.5.0
otherdocs: Testing plan update (what's new features)
otherdocs: escape non mdx compliant characters
otherdocs: fix name for notifyRecordingIsOn create parameter [2.7]
security[Snyk] Security upgrade axios from 1.6.4 to 1.7.4 (export-ann)
fixfix: Breakout rooms show incorrect presentation filename
otherbuild(deps): bump the npm_and_yarn group across 3 directories with 7 updates
fixfix (akka-apps): Banned users being able to rejoin (when they have customdata) by @gustavotrott in #21210
fixfix: Improve screen reader accessibility for polling modal
fixfix(audio): transparent listen only state inconsistencies, build(bbb-webrtc-sfu): v2.14.0
fixfix(video): camera cannot be shared as content
fixfix(presentation): presentation snapshot overflowing the slide [2.7]
fixfix(video): webcam fails to be loaded on preview when changing profiles
fixfix: Ensure size estimate is applied to text shapes while typing
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ar
otherUpdates for project BigBlueButton v2.7 HTML5 client and language et
otherUpdates for project BigBlueButton v2.7 HTML5 client and language tr
otherbuild(bbb-webrtc-sfu): v2.14.1
otherdocs: remove extra entry for webcamBackgroundURL
otherdocs: fix name of errorRedirectUrl in api docs
fixfix(bbb-export-annotations): Handle text rendering issue by @danielpetri1 in #20857
fixfix: Dial-In participants are not visible in the participants
otherenhancement(webcam): custom virtual backgrounds
otherUpdates for project BigBlueButton v2.7 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language eu
otherrefactor: enable warn logs; add a warning when we are skipping an ann…
fixfix: Layout VIDEO_FOCUS shows empty tiles for other participants when see other viewers is locked
fixfix: Manage Layouts ignores disabledFeatures
fixfix: Breakouts calculation for valid users incorrect
fixfix: external video can be seen through sidebar on mobile
fixfix: Emoji animations are not being turned off by using the slider in settings.
fixfix: [2.7] Breakout room invitation option missing from user dropdown
otherbuild(deps): bump the npm_and_yarn group across 5 directories with 6 updates
fixfix: Breakouts - do not allow slide/presentation change on breakout update
featurefeat(config): introduce allowPresentationManagementInBreakouts to be able to block breakouts pres uploads
fixfix(webcam): client failing to apply virtual background effect
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr
otherUpdates for project BigBlueButton v2.7 HTML5 client and language es
otherUpdates for project BigBlueButton v2.7 HTML5 client and language el_GR https://github.com/bigbluebutton/bigbluebutton/pull/20762
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ar https://github.com/bigbluebutton/bigbluebutton/pull/20761
otherchore(core): Update grails-plugin-databinding
otherchore(core): upgrade embedded tomcat
featurefeat(events): Add user custom data to events.xml
fixfix: Enable download of the presentation not possible for temporarily presenters
featurefeat(bbb-html5): Ban specific users from the public chat
fixfix(bbb-web and html5): removed .odi and .odc file-type supports (back-port)
featurefeat: Pass a different presentation to each breakout
featurefeat: Accept custom webcamBackgroundURL
otherbuild(deps-dev): bump postcss from 8.4.32 to 8.4.33 in /bbb-learning-dashboard in the npm_and_yarn group across 1 directory
otherbuild(deps-dev): bump postcss from 8.4.33 to 8.4.34 in /bbb-learning-dashboard in the npm_and_yarn group across 1 directory #20773
otherdocs: 2.7.10 features breakouts with own pres; ban posts from user by @antobinary in #20774
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fr https://github.com/bigbluebutton/bigbluebutton/pull/20385
otherUpdates for project BigBlueButton v2.7 HTML5 client and language uk_UA
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ca
otherUpdates for project BigBlueButton v2.7 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fa_IR
otherUpdates for project BigBlueButton v2.7 HTML5 client and language gl
otherUpdates for project BigBlueButton v2.7 HTML5 client and language et
otherUpdates for project BigBlueButton v2.7 HTML5 client and language fi
otherUpdates for project BigBlueButton v2.7 HTML5 client and language es_ES
otherUpdates for project BigBlueButton v2.7 HTML5 client and language ru
fixfix: only allow POST for insertDocument in UrlMappings.groovy [2.7]
fixfix(API): Allow additional parameters in content type headers
featurefeat (backport 2.7): Introduces allowPromoteGuestToModerator config
otherbuild(fix): File permissions in packages should not depend on umask of build system
fixfix(recording): Add participants, raw size, and playback size information to video metadata
security[Snyk] Security upgrade rubocop from 1.31.2 to 1.32.0
otherchore: npm audit fix for learning dashboard
otherdocs: Make clear in docs that parameters are case sensitive.
otherdocs: Various fixes by @MBM1607
otherdocs: adjust correct default value for breakouts being recorded
otherdocs(GL): correct statements about presentations not being migrated and how to fix entity too large errors
otherdocs: Clarify that allowPromoteGuestToModerator is a CREATE parameter by @antobinary in #20559
fixfix(whiteboard): Inconsistent Zoom Between Live Session And Recording
fixfix(whiteboard): Disable Duplication Shortcut Key While Drawing
otherUpdates for project BigBlueButton v2.7 HTML5 client and language eu
securityfix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4
otherrefactor(bbb-web): Add message key to insertDocument responses
securitybuild(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q
security[Snyk] Fix for 1 vulnerabilities
othertest: [Snyk] Security upgrade jest from 27.5.1 to 29.0.0
otherdocs: drop plugin @cmfcmf/docusaurus-search-local