What's New in BigBlueButton 3.0.19

BigBlueButton 3.0.19 introduces an opt-in unified layout, several improvements to LiveKit-based audio, and multiple core fixes. This release also includes security updates, dependency bumps, and localization updates.

New Unified Layout (Opt-In)

A revamped layout system is now available as an opt-in feature. The new unified layout reorganizes content panels without a separate dialog for layout selection. Camera sorting and pagination have also been improved. This feature is currently opt-in, so administrators and users can try it before it becomes the default in a future release.

LiveKit Audio Fixes

Several fixes target LiveKit audio reliability and compatibility:

  • Volume control for plugin SDK and away mode now works correctly.
  • SIP calls are accepted even when no published audio tracks are present.
  • Stricter measures prevent publish-unpublish loops.
  • LiveKit token update failure on the database has been resolved.

Client and Core Improvements

The HTML5 client receives several important fixes:

  • Lock settings are no longer visible in breakout rooms.
  • Private chat in breakout rooms is properly restricted if locked in the parent room.
  • Quiz creation with "true/false" or "yes/no/abstention" options now works in languages other than English.
  • Poll typed responses have increased visible area.
  • TLDraw zoom call was cleaned up to avoid unnecessary actions.
  • SVG file support has been dropped client-side.

On the core side, a trailing slash issue in the default HTML5 client URL was fixed. Plugin loading errors in bbb-web and Akka have been resolved. Pinned notes notifications were moved to the backend for better reliability.

Security and Dependency Updates

Several security vulnerabilities were addressed:

  • Upgraded validator from 13.12.0 to 13.15.22 (Snyk).
  • Upgraded express from 5.0.1 to 5.2.0.
  • Bumped spring-data-commons from 3.4.4 to 3.4.10.
  • Bumped commons-validator from 1.7 to 1.10.0.
  • Updated Tika-related dependencies.
  • Scala version was bumped from 2.13.9 to 2.13.18.
  • bbb-playback was updated to 5.4.3, which includes a security fix (GHSA-8vv7-vj94-q2pv, public after Feb 2, 2026).

Packaging Updates

LiveKit components were updated: livekit-server to v1.9.7, livekit-sip to v1.2.0, livekit-cli to 2.16.0, and @livekit/components-react to 2.9.16. bbb-webrtc-sfu was upgraded to v2.21.2. Additionally, the bbb-web nginx configuration was made non-executable.

Localization and Documentation

Locale updates were contributed for Turkish, Arabic, Italian, Russian, and Estonian. Documentation was updated to include a note about the trailing slash fix in cluster-proxy and customize docs, and the snapshotOfCurrentSlide property was documented.