4 ms·

It's quite popular everywhere. Interesting that 2.90 just showed up in Fedora updates.

• cesarb 11y ago
  At least Linux distributions usually compile from source. I wonder if the source was also modified, or only the binaries. EDIT: I downloaded the Transmission 0.90 and 0.91 source code and took a look. The diff between them is quite small, with nothing suspicious being removed, and the 0.90 .tar.xz MD5 matches what Fedora used (according to http://pkgs.fedoraproject.org/cgit/rpms/transmission.git/commit/?h=f23&id=640c669434ea7f7b92449a50aba118f4b7335354 http://pkgs.fedoraproject.org/cgit/rpms/transmission.git/com...). So, unless there was also a malicious source code change the developer didn't catch, Fedora's package should be clean.
  • mhurron 11y ago
    > I wonder if the source was also modified, or only the binaries. Personally, pending further information, I've removed Transmission from my machine.