Planned security patch release 3.0.37 Thursday, Sept 8, 2026

[Anton Georgiev]

Hi everyone!

We intend on releasing a security-fixes-only BigBlueButton 3.0.37 on Thursday. We recommend upgrading.

The work you may have seen (on v3.0.x-develop) tagged for BigBlueButton 3.0.37 will instead be tracked as 3.0.38. BigBlueButton 4.0.x will also receive the patches.

Anton and team

[Anton Georgiev]

** Thursday September 10, 2026

[Anton Georgiev]

https://github.com/bigbluebutton/bigbluebutton/releases/tag/v3.0.37

We encourage administrators to update!

Note, we drop support for SIP.JS audio (/ws) here as part of one of the patches. BigBlueButton 4.0 already had it dropped. A corresponding change in bbb-install.sh (v3.0.x-release branch) was made too.

[Anton Georgiev]

https://github.com/bigbluebutton/bigbluebutton/releases/tag/v4.0.0-rc.2

We encourage administrators to update their 4.0 servers to this second release candidate! Note, we still only recommend BigBlueButton 3.0.x for production use.

Anton and team

[Reimar Bauer]

Hi there,

after the upgrade I see a 502 Bad Gateway but

bbb-conf --status
nginx ————————————————————————► [✔ - active]
freeswitch ———————————————————► [✔ - active]
redis-server —————————————————► [✔ - active]
bbb-apps-akka ————————————————► [✔ - active]
bbb-fsesl-akka ———————————————► [✔ - active]
postgresql ———————————————————► [✔ - active]
bbb-graphql-actions ——————————► [✔ - active]
bbb-graphql-middleware ———————► [✔ - active]
bbb-graphql-server ———————————► [✔ - active]
bbb-webrtc-sfu ———————————————► [✔ - active]
bbb-webrtc-recorder ——————————► [✔ - active]
etherpad —————————————————————► [✔ - active]
bbb-web ——————————————————————► [✔ - active]
bbb-pads —————————————————————► [✔ - active]
bbb-export-annotations ———————► [✔ - active]
bbb-rap-caption-inbox ————————► [✔ - active]
bbb-rap-resque-worker ————————► [✔ - active]
bbb-rap-starter ——————————————► [✔ - active]

also a second update did not solve it

ideas?

best regards

Reimar

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bigbluebutton-dev/4385ef4f-d21b-43d9-b96a-8a44fa1537ccn%40googlegroups.com.

[Reimar Bauer]

Hi there,

read https://github.com/bigbluebutton/greenlight/releases/tag/release-3.9.0

do that first 

then update BBB

[Reimar Bauer]

Hi there,

I have an idea for improving the status page. It would be helpful if we could clearly show when greenlight logs are experiencing an error.

docker logs greenlight
ERROR: URL_HOST must be set to the hostname Greenlight is served from.

best regards

Reimar