rtpengine
rtpengine backports the same DTLS and socket fixes across four maintenance branches at once.
A side-by-side editorial comparison of BigBlueButton and Greenlight — release velocity, themes, recent moves, and the top alternatives to consider.
BigBlueButton 4.0 rc.4 is a security-only release as the LiveKit stack hardens.
BigBlueButton 4.0.0-rc.4 contains security fixes only, including a command injection through destination_number, unauthenticated access to a meeting's audio conference and shared notes reachable by non-members. It follows rc.2, also security-only, and rc.3, which focused on LiveKit reconnection and test stability. The project still recommends 3.0.x for production.
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
BigBlueButton 4.0.0-rc.4 contains security fixes only, including a command injection through destination_number, unauthenticated access to a meeting's audio conference and shared notes reachable by non-members. It follows rc.2, also security-only, and rc.3, which focused on LiveKit reconnection and test stability. The project still recommends 3.0.x for production.
The 4.0 cycle has moved from architecture (LiveKit as the only media path, BlockNote notes, Java 21) to hardening. Two security-only candidates in a month show the new LiveKit audio and notes surfaces are getting close scrutiny before GA.
Expect 4.0.0 GA once the release-candidate cadence quiets, likely preceded by at least one more rc. The steady flow of advisories makes the exact timing unclear.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
Greenlight's release cadence is maintenance-driven: security response and dependency updates rather than feature work. The 3.9.0 breaking change is the project tightening deployment requirements, likely in response to misconfiguration risks identified in security audits. The rapid hotfix points to limited pre-release testing capacity on the project.
The undisclosed 3.9.0 security fixes will be disclosed within weeks and likely explain the URL_HOST mandate — deployments without it were probably vulnerable to host header injection or similar configuration-dependent attacks.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BigBlueButton or Greenlight.
rtpengine backports the same DTLS and socket fixes across four maintenance branches at once.
coturn ships three minor versions in six weeks, packaged as Docker images on three registries.
OpenSIPS 4.0 is in release-candidate testing, with two RCs a month apart.
Kamailio's tracked feed shows one thing: a quiet, schema-stable 5.8 maintenance release.
JW Player is rebuilding its VOD pipeline around CMAF, one workflow fix at a time
Restream's webinars get a registration page and a CSV of leads, turning broadcasts into a pipeline
See all BigBlueButton alternatives → · See all Greenlight alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — video-conferencing, open-source, security — within Meetings. BigBlueButton and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. BigBlueButton and Greenlight are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top BigBlueButton alternatives in Meetings are ranked by recent ship velocity. Browse the "BigBlueButton alternatives" section above for the current picks, or visit /alternatives/bigbluebutton for the full list with editorial commentary on each.
Top Greenlight alternatives in Meetings are ranked by recent ship velocity. Browse the "Greenlight alternatives" section above for the current picks, or visit /alternatives/greenlight for the full list with editorial commentary on each.