The Transmission project has shipped version 4.1.4, the fourth maintenance update in the 4.1 series for the popular open-source BitTorrent client. The release arrives roughly four months after 4.1.3 and bundles a wide set of bug fixes, a macOS security patch, and interface improvements across its Qt, GTK, and web clients.
Security and stability fixes
Transmission 4.1.4 hardens the torrent-add RPC method against malformed requests, closing off a potential vector for malicious or broken input. It also patches the macOS client against a possible remote code execution vulnerability, though the developers note that exploiting it would require an attacker to already have local write access to the user's preferences file-limiting its real-world risk but still worth patching promptly.
The update also resolves a regression introduced earlier in the 4.1 series that mishandled torrents containing zero-byte files, a flaw that could sometimes wipe out recorded download progress. A separate, rarer issue that could leave Transmission running invisibly in the background after a user closed it has also been fixed, along with a bug that occasionally prevented webseed downloads from completing.
Networking and build fixes
Users who rely on the TR_CURL_PROXY_SSL_NO_VERIFY setting will see a fix for a bug that had unintentionally disabled SSL verification for origin servers as well, a behavior that undermined the setting's intended scope. On the development side, the team corrected a build failure that occurred when compiling Transmission with -Wnull-dereference -Werror under GCC 12.15, which should smooth things out for packagers and contributors building from source.
Interface and workflow improvements
A notable change in this release unifies how the Qt and GTK desktop clients launch and hand off new torrents. If one client is already running and the other is triggered-either manually or through a browser's MIME-type handler-the new torrent now gets passed to the already-running session instead of opening a duplicate instance.
- The GTK client now re-sorts and re-filters the torrent list when a torrent's top-level folder name changes, opens the correct folder for single-file torrents stored in nested directories, and displays the app icon correctly on certain desktop environments.
- The Qt client's interface code was optimized to reduce CPU usage.
- The web client no longer mislabels some torrents as "Unknown" in the display.
- The
transmission-remotecommand-line tool had its broken--list-groupsargument repaired.
Full release notes and the source tarball for those who want to compile Transmission 4.1.4 themselves are available on the project's official GitHub page.