Why does Linux Mint include a nearly 3 years old version of Transmission?

[Yacy]

If I understand it correctly, according to the following site, linux mint comes with a nearly 3 years old version (2.82) of transmission.
https://trac.transmissionbt.com/wiki/Changes

Does someone know why it doesn't use a more recent version? Is it safe to use such an outdated version of a p2p application?

[Yacy]

Oh, I just noticed the sticky post "Why are my applications not the latest possible version?".

But I'm still wondering, why such an old version is still being used. According to the following site, it seems to be affected by a security vulnerability (CVE-2014-4909):

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

https://www.cvedetails.com/cve/CVE-2014-4909/

[Pierre]

the Transmission program will most likely be updated,
in the next LinuxMint release, which is due in several weeks time
ie: LM 18 LTS

[Yacy]

Thank you very much for the info, Pierre!

[Bolle1961]

LMDE 2 has 2.84, it's still allmost 2 years old, but it's a "safe" version
2.84 is also in wily, maybe you can install that package manually
http://packages.ubuntu.com/search?keywo ... chon=names

[d00med]

2.82 is the stable upstream version Ubuntu uses as well.

[Radish]

This is one of the two issues about Mint that find disappointing at times - old software, software years out of date. That said I still like Mint a lot.

As far Transmission goes why not just try an up-to-date alternative. Tixati is very good and if you just want to play around with it a bit then you can try Tixati Portable (don't have to install anything to the system). I use Tixati portable all the time and very pleased with it.

[Yacy]

Thank you very much for the infos, boys!