Releases: mullvad/mullvadvpn-app
Releases · mullvad/mullvadvpn-app
android/2022.2
This release is for Android only. Here's a list of the changes since last stable release android/2022.1:
Added
Android
- Add device management to the Android app. This simplifies knowing which device is which and adds
the option to log other devices out when the account already has five devices.
Changed
Android
- Lowered default MTU to 1280 on Android.
- Disable app icon badge for tunnel state notification/status.
Removed
Android
- Remove WireGuard view as it's no longer needed with the new way of managing devices.
Fixed
Android
- Fix unused dependencies loaded in the service/tile DI graph.
- Fix missing IPC message unregistration causing multiple copies of some messages to be received.
- Fix quick settings tile being unresponsive and causing crashes on some devices.
- Fix quick settings tile not working when the device is locked. It will now prompt the user to
unlock the device before attempting to toggle the tunnel state. - Fix crash when clicking in-app URL notifications.
- Fix tunnel info expansion state not remembered during pause and resume.
- Fix disabled login button on login failure. Instead, the login button will now still be enabled
on login failures to let the user re-attempt the login.
Security
Android
- Prevent location request responses from being received outside the tunnel when in the connected
state.
2022.5
This release is for desktop only.
Here is a list of all changes since last stable release 2022.4.
Added
- Add obfuscation settings under "WireGuard settings".
- Add custom option to WireGuard port selector.
Windows
- The default VPN protocol is slowly being changed from OpenVPN to WireGuard.
The app fetches the ratio between the protocols from the API.
Linux
- GUI: Add electron flags to run Wayland native if in a compositor/desktop known to work well
- Add ARM64 (aarch64) builds. This is the first release with Linux ARM support.
Changed
- Reject invalid WireGuard ports in the CLI.
- Reorganize settings into more logical categories.
- Upgrade wireguard-go to 20220703234212 (Windows: v0.5.3).
- Prune bridges far away from the selected relay.
- Stay connected when desktop app is killed or crashes. The only situation where the app now
disconnects on quit is when the user presses the quit button. - Update Electron from 18.0.3 to 19.0.13.
- Expand allowed range of multicast destinations to include all of
239.0.0.0/8
(administratively
scoped addresses), when local network sharing is enabled. - Default to selecting Sweden as the entry location when using WireGuard multihop. Previously,
a random location was used. - Experimental: Upgrade the support for quantum-resistant WireGuard tunnels to a newer protocol.
Windows
- Remove dependency on
ipconfig.exe
. CallDnsFlushResolverCache
to flush the DNS cache. - Upgrade Wintun to 0.14.1.
Linux
- The daemon binary and systemd unit file will now be placed in
/usr/bin/
and
/usr/lib/systemd/system
respectively, to aid with starting the system service on systems where
/opt
isn't mounted during early boot.
Fixed
- Connect to TCP endpoints over IPv6 if IPv6 is enabled for WireGuard.
- Fix udp2tcp not working when quantum-resistant tunnels are enabled.
- Quit app gracefully if renderer process is killed or crashes.
- Enable reconnect in blocked state in desktop app.
- Fix error handling during device removal in the desktop app.
- Enable interface settings when app is logged out
- Fix 'mullvad status -v' to include the port of the endpoint when connecting over TCP.
- Check whether the device is valid when reconnecting from the error state.
- Stop reconnecting when the account has run out of time.
Windows
- Only use the most recent list of apps to split when resuming from hibernation/sleep if applying
it was successful. - Don't fail install if the device tree contains nameless callout driver devices.
Linux
- Don't prevent early boot service from running if logging to a file fails.
- Fix app crashing immediately when using some icon themes.
Security
- When the system service is being shut down and the target state is secured, maintain the
blocking firewall rules. Unless it's possible to deduce that the system isn't shutting down and the
system service is being stopped by the user intentionally. This is to prevent leaks that might
occur during system shutdown. Fixes 2022 Mullvad app audit issue itemMUL22-02
.
Windows
- Upgrade win-split-tunnel driver to version 1.2.2.0. Fixes incomplete validation of input buffers
that could result in out-of-bounds reads. Fixes 2022 Mullvad app audit issue itemMUL22-01
.
Linux
- Added traffic blocking during early boot, before the daemon starts, to prevent leaks in the case
that the system service starts after a networking daemon has already configured a network
interface.
2022.5-beta2
Added
- Add custom option to WireGuard port selector.
Linux
- Add ARM64 (aarch64) builds. This is the first release with Linux ARM support.
Changed
- Experimental: Upgrade the support for quantum-resistant WireGuard tunnels to a newer protocol.
Fixed
Linux
- Fix app crashing immediately when using some icon themes.
2022.5-beta1
Added
- Add obfuscation settings under "WireGuard settings".
Windows
- The default VPN protocol is slowly being changed from OpenVPN to WireGuard.
The app fetches the ratio between the protocols from the API.
Linux
- GUI: Add electron flags to run Wayland native if in a compositor/desktop known to work well
- Add support for Linux ARM64. No installers are produced yet. But the source code can now
be built for ARM64.
Changed
- Reject invalid WireGuard ports in the CLI.
- Reorganize settings into more logical categories.
- Upgrade wireguard-go to 20220703234212 (Windows: v0.5.3).
- Prune bridges far away from the selected relay.
- Stay connected when desktop app is killed or crashes. The only situation where the app now
disconnects on quit is when the user presses the quit button. - Update Electron from 18.0.3 to 19.0.13.
- Expand allowed range of multicast destinations to include all of
239.0.0.0/8
(administratively
scoped addresses), when local network sharing is enabled. - Default to selecting Sweden as the entry location when using WireGuard multihop. Previously,
a random location was used.
Windows
- Remove dependency on
ipconfig.exe
. CallDnsFlushResolverCache
to flush the DNS cache. - Upgrade Wintun to 0.14.1.
Linux
- The daemon binary and systemd unit file will now be placed in
/usr/bin/
and
/usr/lib/systemd/system
respectively, to aid with starting the system service on systems where
/opt
isn't mounted during early boot.
Fixed
- Connect to TCP endpoints over IPv6 if IPv6 is enabled for WireGuard.
- Fix udp2tcp not working when quantum-resistant tunnels are enabled.
- Quit app gracefully if renderer process is killed or crashes.
- Enable reconnect in blocked state in desktop app.
- Fix error handling during device removal in the desktop app.
- Enable interface settings when app is logged out
- Fix 'mullvad status -v' to include the port of the endpoint when connecting over TCP.
- Check whether the device is valid when reconnecting from the error state.
- Stop reconnecting when the account has run out of time.
Windows
- Only use the most recent list of apps to split when resuming from hibernation/sleep if applying
it was successful. - Don't fail install if the device tree contains nameless callout driver devices.
Security
- When the system service is being shut down and the target state is secured, maintain the
blocking firewall rules. Unless it's possible to deduce that the system isn't shutting down and the
system service is being stopped by the user intentionally. This is to prevent leaks that might
occur during system shutdown. Fixes 2022 Mullvad app audit issue itemMUL22-02
.
Windows
- Upgrade win-split-tunnel driver to version 1.2.2.0. Fixes incomplete validation of input buffers
that could result in out-of-bounds reads. Fixes 2022 Mullvad app audit issue itemMUL22-01
.
Linux
- Added traffic blocking during early boot, before the daemon starts, to prevent leaks in the case
that the system service starts after a networking daemon has already configured a network
interface.
android/2022.2-beta2
Changed
Android
- Refresh device data when opening the account view to ensure the local data is up-to-date and that
the device hasn't been revoked. - Disable settings button during login.
Fixed
Android
- Fix crash sometimes occurring during account creation.
- Fix tunnel info expansion state not remembered during pause and resume.
- Fix crash during some view transitions.
- Fix disabled login button on login failure. Instead, the login button will now still be enabled
on login failures to let the user re-attempt the login.
2022.4
Added
Windows
- Windows daemon now looks up the MTU on the default interface and uses this MTU instead of the
default 1500. The 1500 is still the fallback if this for some reason fails. This may stop
fragmentation.
Fixed
Linux
- Fix issue where MTU could not be manually set in the app.
- Lower the max MTU from the automatic MTU detection down to 1380,
which was the hardcoded default before the automatic detection was implemented.
This solves issues where the physical interface MTU was set higher than it could
actually transport.
android/2022.2-beta1
Added
Android
- Add device management to the Android app. This simplifies knowing which device is which and adds
the option to log other devices out when the account already has five devices.
Changed
Android
- Lowered default MTU to 1280 on Android.
- Disable app icon badge for tunnel state notification/status.
Removed
Android
- Remove WireGuard view as it's no longer needed with the new way of managing devices.
Fixed
Android
- Fix unused dependencies loaded in the service/tile DI graph.
- Fix missing IPC message unregistration causing multiple copies of some messages to be received.
- Fix quick settings tile being unresponsive and causing crashes on some devices.
- Fix quick settings tile not working when the device is locked. It will now prompt the user to
unlock the device before attempting to toggle the tunnel state. - Fix crash when clicking in-app URL notifications.
Security
Android
- Prevent location request responses from being received outside the tunnel when in the connected
state.
2022.3
This release is for desktop only.
This release is identical to 2022.3-beta3.
2022.3-beta3
Fixed
- Fix showing incompatible relay filtering options in desktop app. The filtering options are now
dependent on the other filters.
Windows
- Fix app occasionally getting stuck in the offline state after being suspended.
Linux
- Fixed incompatibility with newer kernel versions (5.19 and up).
Security
Windows
- Fix potential leak window when stopping the service and auto-connect is enabled and always
require VPN is disabled. When stopped, usually due to a reboot, the daemon would disconnect
before entering a blocking state.
2022.3-beta2
This release is a small bugfix release that only affects Windows. Linux and macOS has no changes at all in this release, compared to 2022.3-beta1
.
Fixed
Windows
- Fix DNS issue on non-English Windows installations. Don't parse the output of ipconfig.exe
to determine if the tool succeeded.