On May 22, 2020, the release of the popular cross-platform free BitTorrent client Transmission took place, supporting not only the standard graphical interface but also command line and web management, known for its speed and low resource consumption.
The following changes have been implemented in the new version:
General changes across all platforms:
- RPC servers can now accept connections over IPv6
- Certificate verification is enabled by default SSL, for compatibility with which TR_CURL_SSL_VERIFY was replaced with TR_CURL_SSL_NO_VERIFY
- For .torrent and .resume file names, the hash is used by default again
- To protect against brute force attacks, the built-in web servers limited the number of failed login attempts to 100
- The seeding time is limited to 40320 minutes (4 weeks) when idle
- Peer IDs for torrent clients Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk added
- INT64_MAX is declared as the size of the incomplete download by default if the actual size is unknown (helps, for example, with Amazon S3 trackers)
- Support for TCP_FASTOPEN(will slightly speed up connection startup)
- ToS processing in IPv6 connections has been improved
- The handshake will be forcibly interrupted if a shared secret cannot be obtained (led to crashes)
- Changing trackers during announcement is prohibited (led to crashes)
- Support for 'session ID' files (in the temporary directory) has been added, allowing for more accurate identification of whether a session is local or remote; the ID is attached to the 'session-get' response.
- Support for classless addressing (CIDR) in the blacklist added
- Support for labels in libtransmission and transmission-remote added
- The session-id header processing has become case-insensitive
- Support for loading CA certificates from the system store
- Multiple memory leaks resolved (magnet downloads, session completion, binary data parsing)
- CMake build improvements (Ninja generator, libappindicator, systemd, Solaris, and macOS)
- Transition to submodules for resolving (most) third-party dependencies
Daemon changes:
- Use of libsystemd instead of libsystemd-daemon
- Strict prohibition of privilege escalation for transmission-daemon.service
Web client:
- XSS vulnerability fixed
- Stylesheet fixed in Chromium 59+
- Added display of the 'Download' button (as in 'Upload to Site', not 'Download to Myself') on mobile devices.
- Added display of remaining upload time in compact mode (previously only available on mobile devices and in expanded mode).
Source: linux.org.ru
