| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-01 | 2.6 kB | |
| v3.0.38 source code.tar.gz | 2026-10-01 | 178.6 MB | |
| v3.0.38 source code.zip | 2026-10-01 | 181.2 MB | |
| Totals: 3 Items | 359.8 MB | 2 | |
This iteration of BigBlueButton 3.0 contains security fixes only. We encourage administrators to update!
More details included in the advisories below. Note, if they are not yet public when reading this, check a bit later.
- Command Injection through "destination_number" https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-f6gw-hpfv-5gxg
- Unauthenticated access to a meeting's audio conference https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-49qg-pcv3-r2g6
- BlockNote shared notes accessible to non-members of a meeting https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-gjvc-jq4g-58xp
- Live meeting streams remain accessible to a removed participant https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-j5gq-h48h-23r4
- Unescaped poll text in presentation export enables SVG injection and server-side request forgery https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-rr62-cx93-4fwh
- Hidden user list can be bypassed through voice and reaction data https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-52cv-pvw8-89c6
- Breakout room access is not revoked after a participant is removed https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5p2g-ff34-ghm3
- Whiteboard annotation authorship could be forged by a participant with whiteboard access https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-x795-r9c3-rh9q
- Stored XSS Through an Unvalidated Audio-Caption Locale in the Legacy Recording Player https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-h6m5-4xgx-pvpp
Full Changelog: https://github.com/bigbluebutton/bigbluebutton/compare/v3.0.37...v3.0.38
Release name
Passing -v jammy-300 to https://github.com/bigbluebutton/bbb-install/blob/v3.0.x-release/bbb-install.sh will always install the latest released BigBlueButton 3.0 version.
If for some reason you would like to install this specific release, pass -v jammy-300-3.0.38.
We still recommend using -v jammy-300 as this repository is continually updated with each BigBlueButton 3.0 release.
