BigBlueButton 4.0.0-beta.5 released! with security fixes included

[Anton Georgiev]

We are pleased to announce BigBlueButton 4.0.0-beta.5!

BigBlueButton 4.0.0-beta.5 brings a mobile layout overhaul (paginated webcams, compact bars, responsive dialogs, and side-by-side cameras and presentation on phones in landscape) along with automatic light/dark theme switching via prefers-color-scheme. Audio work continues with a new dedicated Audio settings tab, push-to-talk enabled in settings.yml, and better BBB<->LiveKit state reconciliation on reconnects. On the packaging side this beta adds the bbbctl admin tool and a bbb-coturn package, makes bbb-etherpad and bbb-pads optional, and carries a broad set of dependency upgrades. Below is a list of the pull requests in this iteration, grouped by component.

We strongly encourage administrators to update their existing 4.0.x-beta servers to beta.5!
For production use we still recommend the latest release of BigBlueButton 3.0.x.

In addition to updating to this patched version, we encourage administrators to proactively rotate the API secret via bbb-conf --setsecret https://docs.bigbluebutton.org/administration/bbb-conf/#--setsecret-new_secret

More details included in the advisory below in the bbb-etherpad section.

Linked is a list of the pull requests in this iteration, grouped by component.

Link to installation command / instructions/ features:
https://docs.bigbluebutton.org/4.0/administration/install/

The full release notes are here

https://github.com/bigbluebutton/bigbluebutton/releases/tag/v4.0.0-beta.5

If you want to report any potential security issues with BigBlueButton, please check https://github.com/bigbluebutton/bigbluebutton/security/policy#reporting-a-vulnerability

As always, we welcome feedback on this latest update.
Anton and team