What's New in BigBlueButton 3.0.13

Version 3.0.13 is a maintenance release that addresses several security vulnerabilities and includes a wide range of client and server-side fixes. The update improves stability, poll functionality, chat behavior, and the Learning Analytics Dashboard, among other areas. Administrators are encouraged to update to benefit from the security patches and quality-of-life improvements.

HTML5 Client Improvements

This release brings multiple fixes to the HTML5 client. Poll-related issues have been corrected, including a fix for quickPollConfirmationStep incorrectly turning a quiz into a poll, support for locales on annotation polls, and prevention of poll options being hidden when there are 10 or more options. Smart poll detection has been improved for typed-response slides without options, and the correct answer marker no longer clips on long options.

Other client fixes include adding regex to handle missing question text in smart slides, preventing the device settings window from disappearing when a recording permission prompt appears, adding support for audio elements on external video, and fixing a misleading crossed-out microphone icon for listen-only participants (now shows headphones). Chat messages can now be selected, and sequential numbering on saved whiteboards and notes in breakout rooms has been fixed. Console warnings and errors have also been reduced.

Security Fixes

Several security vulnerabilities have been addressed in this release. A fix in the chat reactions feature removes emoji IDs to prevent a security issue (GHSA-5m8m-h7fj-8wx6). The gql-actions component includes validation for mutation pollSubmitUserVote to address another vulnerability (GHSA-73j3-v3fq-fqx5). Additionally, the bbb-pads package has been updated to version 1.5.4 to fix a security issue (GHSA-9jv9-cjrm-grj2). These advisories will be made public around September 1, 2025.

Core and Plugin Updates

Core improvements include a fix for some presentation-related configurations not being respected in bbb-web, and a new feature that persists plugin errors from the back-end so they can be logged into the front-end. A concurrency explanation has been added for presentation upload. The plugin SDK has been updated to version 0.0.90, and new capabilities for plugins include custom-query and custom-mutation functions to better manipulate content in the sidekick area.

Learning Analytics Dashboard

The Learning Analytics Dashboard has received several fixes and enhancements. Poll and quiz sorting has been corrected, quiz answers are now localized, and the quizzes table no longer shows a user's response as incorrect when the correct answer was not disclosed. An info_ended field has been added for polls and quizzes in the dashboard JSON, and user avatars have been improved.

Recording and Packaging

Recording exports now include quiz information in the presentation format. A PDF export fix ensures poll results are correctly displayed. Packaging improvements include a fix for umask issues on systems with umask 0077, CORS now allowed for assets under /plugins/, and updates to bbb-webrtc-sfu (v2.19.0-beta.5), bbb-webrtc-recorder (v0.11.0), and bbb-playback (v5.4.0).