This 2.4 release fixes an (important) security issue - the security rating for the CVE is 7.5/10. All issues fixed in this release are subject to public disclosure on June 1, 2022. Please make sure to update your systems in time.
We would like to thank Giang. Võ Quý from VNG Corporation for responsibly disclosing and assisting with the fixing this security issue.
There are also updates to quite a few npm dependencies, and also multiple improvements to external video, webcams, layouts and presentation.
Thanks to the community members who provided feedback to the earlier 2.4 releases!
HTML5 client
- refactor: Remove the endpoint html5/useragent #14886 improves security - expect CVE
- fix: minimize button does not appear with autoSwapLayout and oldMinimizeButton #14869
- fix(microphone): modal not showing errors #14683
- fix(audio): restore audio behavior within main room after leaving breakout room #14316
- fix: Blue screen when using fill poll values option #14871
- fix: Audio device selector icon wrong position in RTL layout #14872
- fix: Closed captions position when the presentation is minimized #14823
- fix: Implements a progress-bar on mobile inside the external video for the viewers. #14784
- test: fixes for 2.4 Playwright tests #14870
- test: minor updates to the 2.4 test specs #14897
- chore: update npm dependencies #14876 improves security
Core
bbb-learning-dashboard
- chore(Dashboard): npm audit fix #14875 improves security
build and configuration
- build: bump bbb-webrtc-sfu to v2.6.14 #14878
- chore: update meteor to 2.7.1 #14877 (newer version of NodeJS included) -- the same set of NodeJS changes were done to the BBB 2.4 packaging scripts (the public build/ scripts are used in BBB 2.5+)
bbb-webhooks:
- chore: Backport (bbb-webhooks 2.3.0) updates to BBB 2.4 #14936 improves security
Recording
- fix: Don't seek past end of video input (BBB 2.4) #14929
Release name
In case an administrator does not want to update to the latest bionic-240 version. Use as substitute to the -v argument in bbb-install.sh command
bionic-240-2.4.7
We still recommend using -v bionic-240.