Releases: mullvad/mullvadvpn-app
Releases · mullvad/mullvadvpn-app
android/2024.2
Here is a list of all changes since last stable release android/2024.1:
Added
- Add the ability to create and manage custom lists in the location selection screen.
- Add the ability to import server IP overrides using text or file.
Fixed
- Remove potentially sensitive tunnel state information from lifecycle log.
Security
- Fix DNS leaks in blocking states or when no valid DNS has been configured due to an underlying OS issue. In these cases a dummy DNS will be set to prevent leaks.
2024.3
This release is for desktop only.
This release is identical to 2024.3-beta1.
Here is a list of all changes since last stable release 2024.2.
Added
Windows
- Add DAITA (Defence against AI-guided Traffic Analysis) setting. On supported servers, this makes
website fingerprinting more difficult by sending random padding packets along with padding all
packets to the same size.
Changed
- Don't fail to start daemon when the offline monitor fails to be initialized.
Fixed
Linux
- Fix GUI not working on Ubuntu 24.04 by adding an AppArmor profile.
- Service failed to start when IPv6 was disabled in the kernel.
android/2024.2-beta2
Security
- Fix DNS leaks in blocking states or when no valid DNS has been configured due to an underlying OS
issue. In these cases a dummy DNS will be set to prevent leaks.
2024.3-beta1
This release is for desktop only.
Here is a list of all changes since last stable release 2024.2.
Added
Windows
- Add DAITA (Defence against AI-guided Traffic Analysis) setting. On supported servers, this makes
website fingerprinting more difficult by sending random padding packets along with padding all
packets to the same size.
Changed
- Don't fail to start daemon when the offline monitor fails to be initialized.
Fixed
Linux
- Fix GUI not working on Ubuntu 24.04 by adding an AppArmor profile.
- Service failed to start when IPv6 was disabled in the kernel.
2024.2
This release is for desktop only.
Here is a list of all changes since last stable release 2024.1.
Added
- Add automatic MTU detection for desktop platforms. This currently only uses information about
dropped packets and does not take fragmentation into account. - Add ability to import server IP overrides in GUI.
Changed
- Change default obfuscation setting to
auto
. - Migrate obfuscation settings for existing users from
off
toauto
. - Change default retry connection attempts.
Fixed
- Continual excessive attempts to update the API IP were made after testing access methods.
- Fix pointless API access method rotations for concurrent requests.
- Fix daemon rotating logs on startup even if another daemon is already running.
- Fix missing redirect to out of time-view when running out of time.
- Fix incorrectly showing "App lost contact with system service" notification on suspend.
- Fix bug where the app would fail to select an existing relay in some scenarios, causing the
user to wrongly end up in a blocked state.
macOS
- DNS was not properly restored in some cases when using custom DNS.
Security
macOS
- Flush states on tunnel state changes. Previously, pre-existing connections could leak when
internet sharing was enabled on a device.
Windows
- Update electron-builder to 24.13.3 to fix CVE-2024-27303, which enabled privilege escelation when
running the installer.
android/2024.2-beta1
Added
- Add the ability to create and manage custom lists of relays.
- Add the ability to import server IP overrides using text or file.
Changed
Fixed
- Fix pointless API access method rotations for concurrent requests.
- Fix broken IPv6 connectivity by making sure the relay selector attempts IPv6 connections.
2024.2-beta1
This release is for desktop only.
Here is a list of all changes since 2024.1.
Added
- Add automatic MTU detection for desktop platforms. This currently only uses information about
dropped packets and does not take fragmentation into account. - Add ability to import server IP overrides in GUI.
Changed
- Change default obfuscation setting to
auto
. - Migrate obfuscation settings for existing users from
off
toauto
. - Change default retry connection attempts.
Fixed
- Continual excessive attempts to update the API IP were made after testing access methods.
- Fix pointless API access method rotations for concurrent requests.
- Fix daemon rotating logs on startup even if another daemon is already running.
- Fix missing redirect to out of time-view when running out of time.
- Fix incorrectly showing "App lost contact with system service" notification on suspend.
android/2024.1
Here is a list of all changes since last stable release android/2023.10:
Added
Android
- Add 3D map to the connect screen.
- Add support for all screen orientations.
- Add possibility to filter locations by provider.
- Add toggle for enabling or disabling split tunneling.
- Add auto-connect and lockdown guide on platforms with system vpn settings.
Changed
Android
- Migrate to Compose Navigation which also improves screen transition animations.
- Increase focus highlight opacity.
- Set auto-connect setting as legacy on platforms with system vpn settings.
- Change default obfuscation setting to
auto
. - Migrate obfuscation settings for existing users from
off
toauto
. - Update support email address to new email address, support@mullvadvpn.net.
Fixed
Android
- Improve DPAD navigation.
- Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
- Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
configured MTU. - Fix crash in Split Tunneling screen caused by apps provding icons bigger than 100MB.
2024.1
This release is for desktop only.
Here is a list of all changes since last stable release 2023.6.
Added
- Add CLI support for applying patches to the settings with
mullvad import-settings
. - Add account UUID to verbose 'mullvad account get -v' output.
- Respect OS prefer-reduced-motion setting.
- Add CLI command for exporting settings patches:
mullvad export-settings
. Currently, it generates
a patch containing all patchable settings, which only includes relay IP overrides. - Make
mullvad status
prints if lockdown mode is enabled when disconnected. - Add option to configure custom API access methods. Custom API access methods allows the user to
circumvent censorship by proxying API traffic. - Add confirmation dialog when deleting a custom list.
- Add support for custom SOCKS5 OpenVPN bridges running locally.
Changed
- CLI command
mullvad relay set tunnel wireguard entry-location
changed to
mullvad relay set tunnel wireguard entry location
, as thelocation
subcommand can now be
swapped forcustom-list
to select entry relays using a custom list. - Remove
--location
flag frommullvad status
CLI. Location and IP will now always
be printed (if available).mullvad status listen
no longer prints location info. - Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
- Upgrade the background map to a new WebGL 3D map. This should both look better and be more
performant. - Update Electron from 26.3.0 to 28.1.3.
- Improve the "Connecting to system service"-view with information about the situation and
troubleshooting tips. - Update support email address to new email address, support@mullvadvpn.net.
Linux
- Rename interface name from
wg-mullvad
towg0-mullvad
. - Enable quantum resistant tunnels by default (when set to
auto
). On other platforms,auto
still
always means the same thing asoff
.
Windows
- Add information to error notification about an error that is often caused by an incompatibility
with VMWare.
Fixed
- Validate that hostname matches correct server type for CLI commands
mullvad relay set location
,
mullvad bridge set location
, andmullvad relay set tunnel wireguard entry location
. - Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
configured MTU. - Fix custom list name validation by not allowing empty names.
- Fix map scaling issues when changing display scale settings and when running under Wayland on
Linux.
Linux
- Prevent fragmentation when multihop is enabled by setting a default route MTU.
- Fix Bash shell completions for subcommands in the CLI.
- Fix out IP missing forever when am.i.mullvad.net returns error.
macOS
- Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
address. - Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
when the default route was removed while connecting. - Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
an MTU on the default route. - Fix bug that caused high CPU usage.
- Fix bugs that caused the log to be filled with socket errors, by handling closed sockets
gracefully.
android/2024.1-beta1
Added
Android
- Add 3D map to the connect screen.
- Add support for all screen orientations.
- Add possibility to filter locations by provider.
- Add toggle for enabling or disabling split tunneling.
- Add auto-connect and lockdown guide on platforms with system vpn settings.
Changed
Android
- Migrate to Compose Navigation which also improves screen transition animations.
- Increase focus highlight opacity.
- Set auto-connect setting as legacy on platforms with system vpn settings.
- Change default obfuscation setting to
auto
. - Migrate obfuscation settings for existing users from
off
toauto
. - Update support email address to new email address, support@mullvadvpn.net.
Fixed
Android
- Improve DPAD navigation.
- Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
- Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
configured MTU.
Security
Android
- Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8.