v3.0.35
Security 1
- Harden static asset path resolution in bbb-etherpad
This iteration of BigBlueButton 3.0 contains security fixes only. We strongly encourage administrators to update!
In addition to updating to this patched version, we encourage administrators to switch to BlockNote shared notes and we proactively rotate the API secret via bbb-conf --setsecret https://docs.bigbluebutton.org/administration/bbb-conf/#--setsecret-new_secret
More details included in the advisory below.
bbb-etherpad
- fix(sec): harden static asset path resolution by @prlanzarin https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-4g74-4wqf-fr8c
Full Changelog: https://github.com/bigbluebutton/bigbluebutton/compare/v3.0.34...v3.0.35