HOMER
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
A side-by-side editorial comparison of BigBlueButton and Red5 — release velocity, themes, recent moves, and the top alternatives to consider.
BigBlueButton 4.0 enters release candidate with LiveKit fully replacing the legacy audio stack.
BigBlueButton is in its final stretch to 4.0 GA, with three release candidates shipping in September 2026. The 4.0 release is a near-complete architectural rebuild: LiveKit has replaced SIP.js and mediasoup as the default media transport, BlockNote replaced the old shared notes engine, and the mobile layout was overhauled. RC2 shipped security fixes for a cross-meeting presentation injection vulnerability, urging immediate admin updates.
Red5 ships constantly and explains almost none of it.
Red5 is a Java media server built around RTMP ingest and delivery. Releases come every few days — nine tags between early May and early July — but most publish nothing beyond an auto-generated link to the commit range. Two version schemes run side by side, with v2.0.16.46 appearing in July while the v2.0.3x series was still incrementing through June, so the tag number alone does not tell you which line a build belongs to.
BigBlueButton is in its final stretch to 4.0 GA, with three release candidates shipping in September 2026. The 4.0 release is a near-complete architectural rebuild: LiveKit has replaced SIP.js and mediasoup as the default media transport, BlockNote replaced the old shared notes engine, and the mobile layout was overhauled. RC2 shipped security fixes for a cross-meeting presentation injection vulnerability, urging immediate admin updates.
The LiveKit migration that began in 3.x security patches has culminated in rc.1's 'LiveKit as audio state source' refactor — the legacy audio path is gone. Multi-room sessions with membership-based tokens and automatic token refresh enable scenarios (breakout listen-in, large conferences) that the old bridge couldn't cleanly support. A 4.0 GA release is imminent given the RC cadence.
4.0 GA will ship within 2-3 weeks based on the RC pace. Post-GA focus will shift to hardening the LiveKit multi-room session model and expanding BlockNote capabilities (Markdown export landed in beta.4; more collaborative editing features likely next). The successful migration may influence other open-source video conferencing projects still running legacy SFU stacks.
Red5 is a Java media server built around RTMP ingest and delivery. Releases come every few days — nine tags between early May and early July — but most publish nothing beyond an auto-generated link to the commit range. Two version schemes run side by side, with v2.0.16.46 appearing in July while the v2.0.3x series was still incrementing through June, so the tag number alone does not tell you which line a build belongs to.
Where changelogs do exist, the work is concentrated in the RTMP hot path: cutting CPU waste and allocation churn on ingest, then addressing thread oversubscription three releases later. The one capability addition visible in this window is AV1 support. Everything else that is described is dependency maintenance — Spring, Bouncy Castle — and build plumbing like on-demand Docker image pushes. The pattern is a small maintainer group optimising a mature server rather than repositioning it.
Expect the RTMP performance thread to continue and AV1 handling to be refined in follow-up releases. The undocumented releases make anything beyond that guesswork — the changelogs would need to carry content before a direction could be read from them.
Other Meetings products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BigBlueButton or Red5.
HOMER patches a SQL injection in /exec and stabilizes Azure and DuckDB storage in 11.0.x
Fourwaves adds custom domain support for event websites, removing the hosted-subdomain constraint for conference organizers
JW Player automates CMAF rendition ladders and sharpens ad attribution by player and placement
Nextcloud Talk Desktop is approaching Talk v25 stable while its July managed-config feature unlocks enterprise mass deployment for the first time.
Nextcloud Talk v25 adds classified conversations and an owner role, targeting regulated enterprise deployments.
Element Call is removing its legacy architecture — the federated multi-SFU model is now the only option.
See all BigBlueButton alternatives → · See all Red5 alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. BigBlueButton is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. BigBlueButton is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Meetings products to evaluate alongside.
Top BigBlueButton alternatives in Meetings are ranked by recent ship velocity. Browse the "BigBlueButton alternatives" section above for the current picks, or visit /alternatives/bigbluebutton for the full list with editorial commentary on each.
Top Red5 alternatives in Meetings are ranked by recent ship velocity. Browse the "Red5 alternatives" section above for the current picks, or visit /alternatives/red5 for the full list with editorial commentary on each.