This is the official release of BigBlueButton 2.5, the culmination of ~6 months of development, ~1900 commits, 6 alpha, 2 beta, and 4 release candidates.
This release runs on a newer version of Ubuntu (20.04) and contains webcam improvements (thanks to switching to mediasoup), numerous breakouts, learning dashboard analytics and polling enhancements. Taking a snapshot of the current slide with annotations was also added. You will also notice improved stability and usability as well as some polishing of the user interface!
Link to the installation command / instructions/ full list of features: https://docs.bigbluebutton.org/2.5/new.html.
We thank ZKI, the German association of Higher Education IT centers, for funding some of the development for this release, especially in the areas of scalability and usability!
We also want to thank the French Ministry of Education who funded the development of some features in 2.5.
We thank Nico Heitmann, Sven Hebrok, and Juraj Somorovsky from Paderborn University who examined the BigBlueButton code base and responsibly disclosed a number of privacy and security issues that were fixed in this (and previous) releases.
We thank the many translators who helped ensure that BigBlueButton is localized into over 55 languages.
Thanks to the community members who provided feedback to the earlier 2.5 releases!
This 2.5 release fixes two security issues - the highest security rating for a CVE fixed in this iteration is 7.2/10. All issues fixed in this release are subject to public disclosure on June 15, 2022 or slightly later. Please make sure to update your systems in time.
Additionally we include fixes to chat, breakouts, recording dependency installation and polishing to the client.
We thank Dr. Arne Kersting from mgm security partners GmbH, who examined the BigBlueButton code base and responsibly disclosed one of the vulnerabilities resolved.
We thank Rick Verdoes and Danny de Weille from Hackify - https://pentests.nl/, who examined the BigBlueButton code base and responsibly disclosed one of the vulnerabilities resolved.
HTML5 client
- fix: Adding border inside shared notes for viewers #15066
- fix: Ensure correct info in user left message #15087 improves security - expect CVE
- fix(camera): prevent dock position change on click #15082
- fix: point media button chevrons upwards #15081
- refactor: Remove inner html #15067 improves security - expect CVE
- refactor: sidebar content panel UI polishing #15044
- refactor: Remove inner html #15067
- refactor: chat and user-list export file name date string #15050
- fix: voice users not removed from participants list #15080 Thanks @schrd
- fix: ghost button focus shadow #15089
- fix: prevent user join from multiple tabs with same sessionToken #15013
- fix: actions bar button styling #15115
- fix: pad line space not showing for viewers #15128
- fix: user not removed from users context on leave #15155
- style: Removing and alinging dropdowns items. #15048
- style: increase dropdown menu padding #15062
- style: increase dropdown menu padding #15064
- style: Audio modal polishing #15131
- chore: Pulled the latest 2.5 HTML5 locales from Transifex #15104
Core
- fix: set target to jvm-1.11 in akka-bbb-fsesl #15053
- fix: Make sure that user is in a chat participant when send a message #15076 improves permissions
- fix: Fix user removal in breakout #15147
Build / config
- build(fsesl-akka): build deps in sequence to allow for ci use #15108
- build: bump bbb-webrtc-sfu to v2.8.2 #15086
Learning Analytics Dashboard
- chore(Dashboard): run npm audit fix #15107
Recording
- chore(recording): Updated Ruby Gems (nokogiri, rack-gem) #15105
- fix: Fix rap-enqueue.rb to load gems with bundler #15116
Release name
We recommend using -v focal-250 to always install the latest release.
You can update to this specific release by passing the release name as -v focal-250-2.5.0 to bbb-install-2.5.sh command.