Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

openSUSE Transmission Moderate Clickjack Security CVE-2026-38978 Advisory

opensuse
Calendar Grey July 9, 2026
Dist Opensuse Esm H88
Transmission update for openSUSE resolves CVE-2026-38978, enhancing security against clickjacking attacks.
An update that fixes one vulnerability is now available.

Description

This update for transmission fixes the following issues:

- CVE-2026-38978: add clickjack safeguards when serving http responses

(boo#1267404).

- Update to 4.0.6:

+ Improved parsing HTTP tracker announce response. (#6223)

+ Fixed 4.0.0 bug that caused some user scripts to have an invalid

TR_TORRENT_TRACKERS environment variable. (#6434)

+ Fixed 4.0.0 bug where alt-speed-enabled had no effect in

settings.json. (#6483)

+ Fixed 4.0.0 bug where the GTK client's "Use authentication"

option was not saved between's sessions. (#6514)

+ Fixed 4.0.0 bug where the filename for single-file torrents aren't

sanitized. (#6846)

+ Fixed 4.0.0 bug where piece size description text and slider state in

torrent creation dialog are not always up-to-date.

+ Fixed build when compiling with GTKMM 4. (#6393)

+ Added the launchable desktop-id to metainfo files. (#6779)

+ Fixed build when compiling on BSD. (#6812)

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate OpenSUSE transmission clickjack CVE-2026-38978

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2026-237=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 ppc64le s390x x86_64):

transmission-4.0.6-bp157.2.3.1

transmission-daemon-4.0.6-bp157.2.3.1

transmission-gtk-4.0.6-bp157.2.3.1

transmission-qt-4.0.6-bp157.2.3.1

- openSUSE Backports SLE-15-SP7 (noarch):

system-user-transmission-4.0.6-bp157.2.3.1

transmission-common-4.0.6-bp157.2.3.1

transmission-gtk-lang-4.0.6-bp157.2.3.1

transmission-qt-lang-4.0.6-bp157.2.3.1

References

https://www.suse.com/security/cve/CVE-2026-38978.html

https://bugzilla.suse.com/1267404

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:0237-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP7

Topics%20covered

Topics Covered

security advisory moderate OpenSUSE transmission clickjack CVE-2026-38978

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.