BigBlueButton 2.7.7 → 2.7.8
1 release · 0 breaking changes · 3 security fixes · 2 advisories fixed
3security0breaking0deprecated0feature2fix
Vulnerabilities fixed by this upgrade
- 3.7 CVE-2024-39302 Some bbb-record-core files installed with wrong file permission
- 4.6 CVE-2024-38518 API Additional Parameters Considered
Breaking changes
None in the release notes.
Security changes
- security fix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4 in 2.7.8
- security build(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q in 2.7.8
- security [Snyk] Fix for 1 vulnerabilities in 2.7.8
Every release in between
fixfix(whiteboard): Inconsistent Zoom Between Live Session And Recording
fixfix(whiteboard): Disable Duplication Shortcut Key While Drawing
otherUpdates for project BigBlueButton v2.7 HTML5 client and language eu
securityfix(sec): fix(sec): API fix duplicates GHSA-4m48-49h7-f3c4 security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4m48-49h7-f3c4
otherrefactor(bbb-web): Add message key to insertDocument responses
securitybuild(sec): set permissions for resque files [2.7] security advisory will be published not earlier than May 31, 2024 https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5966-9hw8-q96q
security[Snyk] Fix for 1 vulnerabilities
othertest: [Snyk] Security upgrade jest from 27.5.1 to 29.0.0
otherdocs: drop plugin @cmfcmf/docusaurus-search-local