HOMER
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
A side-by-side editorial comparison of Greenlight and Red5 — release velocity, themes, recent moves, and the top alternatives to consider.
Greenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
Red5 ships constantly and explains almost none of it.
Red5 is a Java media server built around RTMP ingest and delivery. Releases come every few days — nine tags between early May and early July — but most publish nothing beyond an auto-generated link to the commit range. Two version schemes run side by side, with v2.0.16.46 appearing in July while the v2.0.3x series was still incrementing through June, so the tag number alone does not tell you which line a build belongs to.
Greenlight, the BigBlueButton web frontend, is in a security-maintenance phase. The 3.8.x series was dominated by gem updates and language patches; 3.9.0 introduces multiple undisclosed security fixes alongside a breaking change that requires URL_HOST to be set in .env or the application will refuse to start. A follow-up hotfix landed hours later to address a startup crash introduced in the release.
Greenlight's release cadence is maintenance-driven: security response and dependency updates rather than feature work. The 3.9.0 breaking change is the project tightening deployment requirements, likely in response to misconfiguration risks identified in security audits. The rapid hotfix points to limited pre-release testing capacity on the project.
The undisclosed 3.9.0 security fixes will be disclosed within weeks and likely explain the URL_HOST mandate — deployments without it were probably vulnerable to host header injection or similar configuration-dependent attacks.
Red5 is a Java media server built around RTMP ingest and delivery. Releases come every few days — nine tags between early May and early July — but most publish nothing beyond an auto-generated link to the commit range. Two version schemes run side by side, with v2.0.16.46 appearing in July while the v2.0.3x series was still incrementing through June, so the tag number alone does not tell you which line a build belongs to.
Where changelogs do exist, the work is concentrated in the RTMP hot path: cutting CPU waste and allocation churn on ingest, then addressing thread oversubscription three releases later. The one capability addition visible in this window is AV1 support. Everything else that is described is dependency maintenance — Spring, Bouncy Castle — and build plumbing like on-demand Docker image pushes. The pattern is a small maintainer group optimising a mature server rather than repositioning it.
Expect the RTMP performance thread to continue and AV1 handling to be refined in follow-up releases. The undocumented releases make anything beyond that guesswork — the changelogs would need to carry content before a direction could be read from them.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Greenlight or Red5.
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
Fourwaves adds custom domain support for event websites, removing the hosted-subdomain constraint for conference organizers
BigBlueButton 4.0 enters release candidate with LiveKit fully replacing the legacy audio stack.
JW Player automates CMAF rendition ladders and sharpens ad attribution by player and placement
Nextcloud Talk Desktop is approaching Talk v25 stable while its July managed-config feature unlocks enterprise mass deployment for the first time.
Nextcloud Talk v25 adds classified conversations and an owner role, targeting regulated enterprise deployments.
See all Greenlight alternatives → · See all Red5 alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Greenlight is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Greenlight is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top Greenlight alternatives in Meetings are ranked by recent ship velocity. Browse the "Greenlight alternatives" section above for the current picks, or visit /alternatives/greenlight for the full list with editorial commentary on each.
Top Red5 alternatives in Meetings are ranked by recent ship velocity. Browse the "Red5 alternatives" section above for the current picks, or visit /alternatives/red5 for the full list with editorial commentary on each.