Transmission 4.1.4 has been released today as the fourth maintenance update to the latest Transmission 4.1 series for this popular open-source BitTorrent client, a bugfix release that fixes various issues.

Coming almost four months after Transmission 4.1.3, which was a small update fixing a CORS bug that leaked the anti-CSRF nonce, a use-after-free bug in peer code, and a build error when compiling with fmt 12.2.0, the Transmission 4.1.4 release hardens the torrent-add RPC method against malformed requests.

Transmission 4.1.4 also fixes a regression introduced in Transmission 4.1 that could cause torrents with zero-byte files to be handled incorrectly, which could sometimes cause downloaded progress to be lost, and fixes a rare bug that could leave Transmission hung but running on it is closed.

This release also addresses a rare bug that could prevent downloading webseeds from finishing, a bug where setting TR_CURL_PROXY_SSL_NO_VERIFY broke origin server SSL verification, and a build failure that happened when building Transmission with -Wnull-dereference -Werror in GCC 12.15.

On top of that, Transmission 4.1.4 unifies launch and delegation between the Qt and GTK clients. According to the devs, if either is already running and then you or a browser’s MIME-type handler tries to start the other to add a new torrent, that new torrent will get handed off to the pre-existing session.

The GTK client has been updated to allow the torrent list to re-sort and re-apply its filter when the torrent’s top folder’s name changes, open the correct folder when a single-file torrent uses a directory structure when opening a torrent’s folder, and correctly show the app icon on some desktops.

The Qt Client received improvements to the UI code to use less CPU, the Web client received a fix for a display bug that sometimes listed torrent names as ‘Unknown’, while the macOS client was patched against a potential RCE vulnerability that requires local write access to the user’s preferences.

Last but not least, fixes a bug in transmission-remote that broke the --list-groups argument. Check out the release notes on the project’s GitHub page for more details, where you can download Transmission 4.1.4 as a source tarball if you fancy compiling it from sources.