2018.5

Changed

• Replace OpenVPN root CA certificate bundled with the app to the new Mullvad root CA.

Fixed

Linux

• Improve packaging on RPM based distros by re-enabling the daemon after an upgrade

2018.5-beta1

Added

• Fall back and try to connect over TCP port 443 if protocol is set to automatic and two attempts
  with UDP fail in a row. If that also fails, alternate between UDP and TCP with random ports.
• Add new system and in-app notifications to inform the user when the app becomes outdated,
  unsupported or may have security issues.
• Allow the user to view the relay in/out IP address in the GUI.
• Add OpenVPN proxy support via CLI.
• Allow DHCPv6 in the firewall.

Fixed

• Pick new random relay for each reconnect attempt instead of just retrying with the same one.
• Make the problem-report tool fall back to the bundled API IP if DNS resolution fails.

macOS

• Correctly backup and restore search domains and other DNS settings.

Linux

• Disable GPU acceleration on Linux to fix App on Ubuntu 14.04 and other older distributions.
• Improve DNS management detection. Evaluates which way the system handles DNS before each new
  VPN tunnel is established instead of only on computer boot.
• Set DNS search domain when using the systemd-resolved. Makes it work on Ubuntu 18.10.

Windows

• Fix crash on Windows 7 when closing installer.

Security

Linux

• Block all traffic to DNS servers other than the correct one in the tunnel. Stops potential DNS
  leaks when "Local network sharing" was enabled and DNS management failed.

2018.4

Fixed

• Fix so changing the OpenVPN mssfix setting triggers setting up a new tunnel with the new setting.

2018.4-beta3

Fixed

• Place Mssfix setting inside scrollable area.
• Fix so mssfix can be unset. Previously emptying the textbox did nothing.

Linux

• The app will have its window resized correctly when display scaling settings are changed. This
  should also fix bad window behaviour on startup.
• Fixed systemd-resolved DNS management. Skip using it as the DNS manager if it's running in
  consumer mode.

2018.4-beta2

Added

• Allow configuration of OpenVPN mssfix option with GUI (under Advanced Settings).

Windows

• Monitor and enforce IPv6 DNS settings on network interfaces (previously IPv4-only).

Linux

• Add support for DNS configuration using systemd-resolved and NetworkManager.

Changed

• Auto-hide scrollbars on macOS only, leaving them visible on other platforms.
• Instead of showing the public IP of the device in the UI, we show the hostname of the VPN server
  the app is connected to. Or nothing if not connected anywhere.
• Passing --connect-timeout 30 to OpenVPN to decrease the time the daemon
  will wait until it tries to reconnect again in the case of a broken TCP connection.
• Increase timeout parameter to OpenVPN from 15 to 20 seconds. Should make active VPN tunnels drop
  less frequent when on unstable networks.
• Reduce the transparency of "blocking internet" banner to increase the text readability.
• Make the quit button visible without needing to scroll down in the settings view.

Linux

• Move CLI binary to /usr/bin/ as to have the CLI binary in the user's PATH by default.

Removed

• Remove --comp-lzo argument to OpenVPN. Disables any possibility of establishing a VPN tunnel
  with compression.

Fixed

Windows

• Use different method for identifying network interfaces during installation. Should solve some
  installation errors.
• Properly restore DNS settings on network interfaces. Fixes issue #352.

2018.4-beta1

Added

• Allow packets to the fe80::/10 and fe02::/16 IPv6 networks when local network sharing is enabled.
  Should allow IPv6 over the LAN, and mDNS host discovery which in turn should allow Apple AirDrop
  and Handover among other IPv6 based LAN discovery services.

Linux

• Add support for DNS configuration using resolvconf.

Changed

• Logging in no longer requires a connection with the Mullvad API server.
• Replace repeated Disconnecting followed by Connecting notifications with a single
  Reconnecting notification.

Fixed

• Don't temporarily show the unsecured state in the GUI when the app is reconnecting or blocking.
• Periodically update list of relays in the GUI.
• Redact IPv6 address that start or end with double colons in problem reports.
• Improve tray icon response time by disabling the double click handling.

Security

• Prevent Electron from executing/navigating to files being drag-and-dropped onto the app GUI. This
  fixes MUL-01-001

2018.3

Changed

macOS

• Move the CLI binary (mullvad) back into the Resources/ directory. A bug caused the app to not
  be signed if it was placed in the app root directory.

Security

Windows

• Lock the installation directory to C:\Program Files\Mullvad VPN. This prevents potential local
  privilege escalation by ensuring all binaries executed by the SYSTEM user, as part of the
  Mullvad system service, are stored where unprivileged users can't modify them.

2018.3-beta1

Added

• Add option to enable or disable IPv6 on the tunnel interface. It's disabled by default.
• Log panics in the daemon to the log file.
• Warn in the Settings screen if a new version is available.
• Add a "blocked" state in the app that blocks the entire network and shows a message about what
  went wrong. Then it waits for user action.
• Add support for Ubuntu 14.04 and other distributions that use the Upstart init system.
• Make scrollbar thumb draggable.
• Ability to expand cities with multiple servers and configure the app to use a specific server.
• Add firewall rules allowing traffic to the SSDP/WS-discover multicast IP, 239.255.255.250, if
  local area network sharing is activated. This allows discovery of devices using these protocols.

macOS

• Add uninstall script that can uninstall and remove all the files installed by the app.

Windows

• Extend uninstaller to also remove logs, cache and optionally settings.
• Add installation log (%PROGRAMDATA%\Mullvad VPN\install.log).

Changed

• The "Buy more credit" button is changed to open a dedicated account login page instead of one
  having a create account form first.
• The CLI command to list relays is now shorter, mullvad relay list instead of
  mullvad relay list locations.
• Replace WebSockets with Unix domain sockets/Named pipes for IPC. The location
  of the socket can be controlled with MULLVAD_RPC_SOCKET_PATH.
• Update the relay list if it's out of date when the daemon starts.
• Move the CLI binary (mullvad) on macOS and Linux up one level, so it's installed directly into
  the app installation directory instead of the resource directory.

Fixed

• Fix incorrect window position when using external display.
• Don't auto-connect the daemon on start if no account token is set. This prevents the daemon from
  blocking all internet if logging out from the app.

Linux

• The app window is now shown in its previous location, instead of at the center of the screen.
• Remove daemon log, cache and configuration directories during full uninstallation of the app.
• Restart the daemon automatically on upgrade.
• Fix systemd unit file to support older versions of systemd (e.g., in Debian 8).

macOS

• Fix edge cases when window's arrow appeared misaligned and pointed to the wrong menubar item.
• Make the pkg installer kill any running GUI process after installation is done. Prevents
  accidentally running an old GUI with a newer daemon.

Windows

• Failing to restore DNS settings on daemon start does not make the daemon exit with an error, just
  log the error and continue.

2018.2

This stable release is identical to 2018.2-beta3

2018.2-beta3

Added

• Create a new UI log file for every UI execution session, and preserve the log from the previous
  session.
• Account token can be copied to the clipboard by clicking on it in the account settings screen.
• Automatically scroll to selected country/city in locations view.
• Show system notifications when connection state changes and the window is not visible.
• Add launch view displayed when connecting to system service.

Changed

• Format the expiry date and time using the system locale.
• Account tokens are now required to have at least ten digits.

macOS

• Rename directores for settings, logs and cache from mullvad-daemon to mullvad-vpn.

Windows

• Use local user directory to store system service settings and GUI electron cache, instead of the
  roaming user directory.
• Where the system service would use %LOCALAPPDATA%\Mullvad\Mullvad VPN\ it now just uses
  %LOCALAPPDATA%\Mullvad VPN\

Fixed

• Ignore empty strings as redaction requests in the problem report tool, to avoid adding redacted
  markers between every character of the log message.
• Previously logged in users won't be going through login view when restarting the app, instead
  will be taken straight to main view.