This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalBigBlueButton v3.0.27 lets users pan beyond the presenter's view in infinite whiteboard sessions, improving navigation flexibility.
Why it matters: Enables smoother collaboration on large whiteboards; no migration deadline or security impact noted.
Summary
AI summaryEnable panning outside the presenter's view during infinite whiteboard sessions.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | Medium |
Local address as meta_endCallbackUrl requires explicit hostname allowance via fetchUrlAllowedLocalHosts configuration. Local address as meta_endCallbackUrl requires explicit hostname allowance via fetchUrlAllowedLocalHosts configuration. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Enable users to pan outside the current presenter's view during infinite whiteboard. Enable users to pan outside the current presenter's view during infinite whiteboard. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add Callback URL Validation for bbb-web. Add Callback URL Validation for bbb-web. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Require SessionToken and PageToken on Presentation Page Requests. Require SessionToken and PageToken on Presentation Page Requests. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Upgrade ip-address from 10.1.0 to 10.2.0 in bbb-learning-dashboard. Upgrade ip-address from 10.1.0 to 10.2.0 in bbb-learning-dashboard. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Update mermaid from 11.12.3 to 11.15.0 in docs. Update mermaid from 11.12.3 to 11.15.0 in docs. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Update bbb-pads branch to v1.5.11. Update bbb-pads branch to v1.5.11. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Bump bbb-playback to 5.4.5. Bump bbb-playback to 5.4.5. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Update bbb-playback branch to v5.4.6. Update bbb-playback branch to v5.4.6. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Bump npm_and_yarn group across directories by Dependabot. Bump npm_and_yarn group across directories by Dependabot. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Fix performance issue with block-note dark mode. Fix performance issue with block-note dark mode. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix external video recording not shown after screenshare in Recording. Fix external video recording not shown after screenshare in Recording. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Add presentation minimized events and screenshare as content fixes in Recording. Add presentation minimized events and screenshare as content fixes in Recording. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix events archiving on servers with blocknote in Recording. Fix events archiving on servers with blocknote in Recording. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Decrease size of block-note toolbar. Decrease size of block-note toolbar. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Memoize useMediaSenders result in livekit. Memoize useMediaSenders result in livekit. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
This iteration of BigBlueButton 3.0 brings a new feature allowing users to pan outside the current presenter's view during infinite whiteboard sessions, along with presentation improvements (callback URL validation, session/page token enforcement on presentation requests), recording fixes, and several BlockNote-related performance and stability improvements.
Note: anyone using a local address as the meta_endCallbackUrl will now need to explicitly allow that hostname in bbb-web.properties, using the fetchUrlAllowedLocalHosts configuration.
Below is a list of the pull requests in this iteration, grouped by component.
Link to installation command / instructions / schedule / planned features: https://docs.bigbluebutton.org/3.0/new-features
Big THANK YOU to all community members who helped for this release - both through sending pull requests and through reporting bugs or requesting enhancements! :confetti_ball:
HTML5 client
fixes
- fix(html5): restore Ctrl+Z / Ctrl+Shift+Z in BlockNote by @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/pull/24990
- fix: Poll/quiz publishing does not show notification to viewers by @ramonlsouza in https://github.com/bigbluebutton/bigbluebutton/pull/24988
- fix: Guests note missing / disappearing by @ramonlsouza in https://github.com/bigbluebutton/bigbluebutton/pull/24993
- fix: lockSettingsHideUserList leaks usernames in the chat if a viewer was (temp) set to presenter by @ramonlsouza in https://github.com/bigbluebutton/bigbluebutton/pull/25000
- fix(client): Fix Android being too greedy with Safari user agent (fixes #24295) by @heinrob in https://github.com/bigbluebutton/bigbluebutton/pull/25027
- fix: Fix performance issue with block-note dark mode by @GuiLeme in https://github.com/bigbluebutton/bigbluebutton/pull/25025
- fix(breakouts): user id handling by @Arthurk12 in https://github.com/bigbluebutton/bigbluebutton/pull/24986
- Fix(html5): Presenter whiteboard camera position moving on window resizing by @Tainan404 in https://github.com/bigbluebutton/bigbluebutton/pull/24968
- fix: fix hardcoded colors scheme for exported notes.html by @GuiLeme in https://github.com/bigbluebutton/bigbluebutton/pull/25033
- fix: bn- table crash with static toolbar by @GuiLeme in https://github.com/bigbluebutton/bigbluebutton/pull/25076
features and refactors
- feat: Enable users to pan outside the current presenters view during infinite whiteboard by @ramonlsouza in https://github.com/bigbluebutton/bigbluebutton/pull/25010
- refactor(livekit): memoize useMediaSenders result (selective sub) by @prlanzarin in https://github.com/bigbluebutton/bigbluebutton/pull/24972
- ref: decrease size of block-note toolbar by @GuiLeme in https://github.com/bigbluebutton/bigbluebutton/pull/25023
test and CI
- fix (ci/tests): Stabilize cross-page slide comparison by @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/pull/25052
locales
- [3.0 locales] Updates for project BigBlueButton v3.0 HTML5 client by @transifex-integration[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/24992
Core
- fix(bbb-web): Add Callback URL Validation by @paultrudel in https://github.com/bigbluebutton/bigbluebutton/pull/24828
- refactor (gql-middleware): Minor improvements by @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/pull/24832
- refactor(bbb-web): Update Plugin URL Handling by @paultrudel in https://github.com/bigbluebutton/bigbluebutton/pull/24996
- fix (gql-server): Set
typing=falseonce user edited a message by @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/pull/24999 - feat: cache plugin manifest files with bbb-web by @GuiLeme in https://github.com/bigbluebutton/bigbluebutton/pull/24220
- fix(presentation): Require SessionToken and PageToken on Presentation Page Requests by @paultrudel in https://github.com/bigbluebutton/bigbluebutton/pull/25020
Recording
- [3.0 recording] fix: external video recording not shown after screenshare by @hiroshisuga in https://github.com/bigbluebutton/bigbluebutton/pull/23987
- fix(recording): add presentation minimized events + screenshare as content fixes by @germanocaumo in https://github.com/bigbluebutton/bigbluebutton/pull/23924
- fix(recording): Fix events archiving on servers with blocknote by @kepstin in https://github.com/bigbluebutton/bigbluebutton/pull/25054
Packaging and configuration
- build: Update bbb-pads branch to v1.5.11 by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/25039
- build: bump bbb-playback to 5.4.5 by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/25040
- build: Update bbb-playback branch to v5.4.6 by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/25062
Documentation
- docs(administration): fix typos in lti.md by @waldo121 in https://github.com/bigbluebutton/bigbluebutton/pull/24961
- docs: rebuild "Other meeting configs available" table by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/25066
Chore
- chore: Migrate from deprecated GitHub Stale App to actions/stale, exempt milestone issues by @Copilot in https://github.com/bigbluebutton/bigbluebutton/pull/25013
- chore: Replace defunct behaviorbot/welcome app with GitHub Actions workflow by @Copilot in https://github.com/bigbluebutton/bigbluebutton/pull/25014
- chore: Expand welcome workflow first-time contributor detection by @Copilot in https://github.com/bigbluebutton/bigbluebutton/pull/25030
- iteration: BigBlueButton 3.0.27 by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/24981
- build(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/24975
- build(deps): bump the npm_and_yarn group across 3 directories with 1 update by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/25016
- build(deps): bump ip-address from 10.1.0 to 10.2.0 in /bbb-learning-dashboard in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/25017
- build(deps): bump the npm_and_yarn group across 4 directories with 1 update by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/25048
- build(deps): bump the npm_and_yarn group across 4 directories with 1 update by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/25055
- build(deps): bump mermaid from 11.12.3 to 11.15.0 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/bigbluebutton/bigbluebutton/pull/25059
New Contributors
- @waldo121 made their first contribution in https://github.com/bigbluebutton/bigbluebutton/pull/24961
- @Copilot made their first contribution in https://github.com/bigbluebutton/bigbluebutton/pull/25013
- @heinrob made their first contribution in https://github.com/bigbluebutton/bigbluebutton/pull/25027
Full Changelog: https://github.com/bigbluebutton/bigbluebutton/compare/v3.0.26...v3.0.27
Release name
Passing -v jammy-300 to https://github.com/bigbluebutton/bbb-install/blob/v3.0.x-release/bbb-install.sh will always install the latest released BigBlueButton 3.0 version.
If for some reason you would like to install this specific release, pass -v jammy-300-3.0.27.
We still recommend using -v jammy-300 as this repository is continually updated with each BigBlueButton 3.0 release.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]