LoginSign Up
← Back to Meetings
Weekly · Meetings · Week of October 5, 2026

BigBlueButton's LiveKit migration closes out with security-only releases while peers fix the plumbing.

livekit-migrationsecurity-fixessip-observabilitypricing-resetwebinar-leads
Y
Generated 1h agoDrawn from 7 products

The week in video conferencing

The sector's biggest story is a transport swap finishing. BigBlueButton moved its audio to LiveKit across the 4.0 betas and release candidates, and its latest release candidate is security-only. A platform that finishes a migration and immediately ships only security fixes is telling readers where the risk was.

Beyond that, the week was infrastructure upkeep and small commercial moves in event and streaming products.

Leaders

BigBlueButton made LiveKit the default for all audio in beta.4 and removed the SIP.js bridge, then completed the migration in rc.1 with LiveKit as the exclusive audio path. Release candidate 4 contains only security fixes, including a command injection through the destination number and unauthenticated access to a meeting's audio conference and shared notes.

HOMER is on an 11.0.x patch train with a release every few days. Recent builds draw OpenTelemetry log events on the SIP call flow ladder, add FlightSQL TLS and extend MCP search with SIP response code, call ID and user agent. Observability for voice is absorbing both OpenTelemetry and agent access.

Restream turned webinars into a lead source: registrations produce leads and a registration page, and clips can be created from public YouTube links. It also added viewer analytics from X.

Fourwaves replaced per-event fees with a flat annual model limited by submissions, then spent its releases on participant messaging, with email alerts for unread direct messages and a communication preferences page.

Wildcards

JW Player is rebuilding its video-on-demand pipeline around CMAF, with automatic renditions and duration-scaled seek thumbnails, while also shipping responsive sizing for vertical video and expanded ad serving analytics. Playback, not meetings, is its subject, and it shows how wide the sector label runs.

Themes that compounded

  • Security fixes shaped the week at BigBlueButton and, through coordinated DTLS and socket backports across maintenance branches, at rtpengine.
  • Observability reached SIP at HOMER, where rtpengine now mirrors RTCP to it.
  • Release cadence was steady at coturn, which published new Docker images across three registries.
  • Commercial packaging moved at Fourwaves and through lead capture at Restream.

Watch this week

Watch whether BigBlueButton's 4.0 reaches a final release after rc.4, and whether more advisories follow the LiveKit cut-over. Watch HOMER for further OpenTelemetry work, since it has shipped on a near-daily cadence, and Restream for more lead-oriented webinar features.