HOMER
HOMER 11 closes a SQL injection in its exec endpoint and extends OpenTelemetry table management in a week of rapid security patches.
A side-by-side editorial comparison of Asterisk and Greenlight — release velocity, themes, recent moves, and the top alternatives to consider.
The three-branch cycle closes: 20, 22 and 23 all promote to final with the same 28-issue set.
The release round that opened on August 7 has finished. Asterisk 20.21.0, 22.11.0 and 23.5.0 all tagged within a minute of each other, each carrying 39 commits from 16 authors, 28 resolved issues and zero security advisories. The counts are identical across all three branches, which is the same backport-in-lockstep pattern the certified track and the June security round both followed.
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
The release round that opened on August 7 has finished. Asterisk 20.21.0, 22.11.0 and 23.5.0 all tagged within a minute of each other, each carrying 39 commits from 16 authors, 28 resolved issues and zero security advisories. The counts are identical across all three branches, which is the same backport-in-lockstep pattern the certified track and the June security round both followed.
Nothing about the shape has changed: three mainline branches plus a certified track, one fix set, promoted together. The rc1-to-rc2-to-final progression narrowed from 27 issues to a single websocket segfault fix and then closed, which is a cycle converging on schedule. Release bodies still publish counts and links rather than user-facing notes, so the feed measures release discipline rather than product direction.
Expect the certified track to pick up this same fix set in its next cert release, following the lag it showed after the June round. The next mainline round should open with rc1 tags on all three branches again.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
Greenlight's release cadence is maintenance-driven: security response and dependency updates rather than feature work. The 3.9.0 breaking change is the project tightening deployment requirements, likely in response to misconfiguration risks identified in security audits. The rapid hotfix points to limited pre-release testing capacity on the project.
The undisclosed 3.9.0 security fixes will be disclosed within weeks and likely explain the URL_HOST mandate — deployments without it were probably vulnerable to host header injection or similar configuration-dependent attacks.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Asterisk or Greenlight.
HOMER 11 closes a SQL injection in its exec endpoint and extends OpenTelemetry table management in a week of rapid security patches.
BigBlueButton 4.0 enters release candidate with LiveKit fully replacing the legacy audio stack.
JW Player automates CMAF rendition ladders and sharpens ad attribution by player and placement
Fourwaves adds custom domain support and tightens its conference registration flow.
Nextcloud Talk Desktop is approaching Talk v25 stable while its July managed-config feature unlocks enterprise mass deployment for the first time.
Nextcloud Talk v25 adds classified conversations and an owner role, targeting regulated enterprise deployments.
See all Asterisk alternatives → · See all Greenlight alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Asterisk and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Asterisk and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top Asterisk alternatives in Meetings are ranked by recent ship velocity. Browse the "Asterisk alternatives" section above for the current picks, or visit /alternatives/asterisk for the full list with editorial commentary on each.
Top Greenlight alternatives in Meetings are ranked by recent ship velocity. Browse the "Greenlight alternatives" section above for the current picks, or visit /alternatives/greenlight for the full list with editorial commentary on each.