Eigen RadarAI
Analysis

Transmission fixes lost download progress and a local macOS flaw

Transmission 4.1.4 fixes a bug that could lose progress in downloads containing zero-byte files, alongside a separate webseed problem. The update also closes a macOS code-execution flaw requiring local write access to preferences. Desktop clients now hand new download requests to an existing session, and minimum macOS support rises to version 12.

Artificial Intelligence··Evening
In an imagined machine, a channel of coloured segments crosses an empty cradle, with a small latched compartment on the front wall.

Progress survives zero-byte files

Transmission Project has released version 4.1.4 of Transmission, its open-source BitTorrent download client. The update addresses lost download progress and a macOS security flaw. The project’s notes trace the progress regression to version 4.1.0: torrents containing zero-byte files could lose completed progress. A separate fix addresses rare failures to finish downloading from webseeds, servers supplying torrent content over the web.[1], [2]

The macOS flaw requires local write access

The potential code-execution issue on macOS requires local write access to the user’s preferences. The project explicitly rules out remote exploitation. The release raises the minimum supported macOS version to 12 and fixes problems adding some magnet links. It also changes the signatures used by the Sparkle updater from the older DSA scheme to EdDSA.[1]

Desktop clients hand requests to the open session

The GTK and Qt desktop clients can now hand a new torrent request to a session already running in the other client, including launches from a browser. Per-torrent overrides of session speed limits apply to uploads and downloads. Other fixes cover an unresponsive shutdown, malformed torrent-add requests and a proxy setting that interfered with verification of the origin server’s encrypted connection.[1]

References

  1. News sourceTransmission ProjectTransmission 4.1.4 fixes lost download progress and a macOS vulnerability↩1↩2↩3
  2. News sourceLinuxiacTransmission 4.1.4 fixes download and security issues↩