Jitsi on AWS 4.1.1: Ubuntu 24.04 and a Year of Upstream Catch-Up

We just published version 4.1.1 of the Jitsi on AWS by FOSSonCloud pattern to AWS Marketplace. This is a patch release that pulls in roughly a year and a half of upstream Jitsi Meet changes, moves the underlying AMI to Ubuntu 24.04, and completes the FOSSonCloud rebrand.

What’s in this release

Jitsi Meet stable-10888 (up from stable-9823)

The previous pattern release pinned stable/jitsi-meet_9823 (November 2024). 4.1.1 moves to stable/jitsi-meet_10888 (March 2026) — roughly 16 upstream stable releases worth of fixes and features. Notable upstream changes during that window:

• Inline web authentication — auth now happens in the same window instead of a popup, fixing flows that broke when popup blockers fired
• Customizable side panels — a new CustomPanel extension point lets integrators add their own toolbox panels alongside chat, polls, and participants
• Expanded external API — the iframe API now sends full user context, fires participantMuted for all mute state changes, and exposes upload/delete events for the file-sharing feature
• File sharing polish — upload-button tooltip, prejoin drag handling fix, and an updated test suite
• Transcription configurability — operators can now allow custom transcriber languages via config
• Recording limit removed — the upstream artificial recording limit is gone
• Connectivity diagnostics — stats-based video freeze detection and analytics events when video decode fails
• Cryptex (encrypted media headers) support added to the SDP/Jingle translation layer
• Build modernization — upstream now builds on Node 24 LTS, with iOS/Android SDK build caching for faster CI

No CVEs were called out by upstream in this window, but the bundled lib-jitsi-meet was bumped repeatedly and Prosody got a number of nil-check and authentication-edge-case hardening fixes worth picking up.

Pattern-level changes (not from upstream)

• Ubuntu 24.04 — the AMI moves from Ubuntu 22.04 to 24.04, picking up newer kernel, OpenSSL, and systemd
• FOSSonCloud rebrand — product listing, console text, and metadata updated to match the new brand

The dual-load-balancer architecture (NLB in front for UDP video traffic plus TCP/443 to an ALB behind it for HTTPS termination via ACM) is unchanged. The CustomDotEnvParameterArn, CustomConfigJsParameterArn, and CustomInterfaceConfigJsParameterArn SSM-driven customization hooks introduced in 4.0.0 still work the same way.

Fresh deployments

Subscribe on AWS Marketplace and launch. You’ll need a Route 53 hosted zone and an ACM certificate in advance — the template handles the rest, including VPC, NLB, ALB, ASG, Secrets Manager, and CloudWatch wiring.

What’s next

We’re tracking the next Jitsi stable cut and will follow up with a 4.1.2 once there’s a meaningful delta. Issues, feature requests, and operator notes are always welcome on GitHub.

— FOSSonCloud