2018.4-beta2

Added

• Allow configuration of OpenVPN mssfix option with GUI (under Advanced Settings).

Windows

• Monitor and enforce IPv6 DNS settings on network interfaces (previously IPv4-only).

Linux

• Add support for DNS configuration using systemd-resolved and NetworkManager.

Changed

• Auto-hide scrollbars on macOS only, leaving them visible on other platforms.
• Instead of showing the public IP of the device in the UI, we show the hostname of the VPN server
  the app is connected to. Or nothing if not connected anywhere.
• Passing --connect-timeout 30 to OpenVPN to decrease the time the daemon
  will wait until it tries to reconnect again in the case of a broken TCP connection.
• Increase timeout parameter to OpenVPN from 15 to 20 seconds. Should make active VPN tunnels drop
  less frequent when on unstable networks.
• Reduce the transparency of "blocking internet" banner to increase the text readability.
• Make the quit button visible without needing to scroll down in the settings view.

Linux

• Move CLI binary to /usr/bin/ as to have the CLI binary in the user's PATH by default.

Removed

• Remove --comp-lzo argument to OpenVPN. Disables any possibility of establishing a VPN tunnel
  with compression.

Fixed

Windows

• Use different method for identifying network interfaces during installation. Should solve some
  installation errors.
• Properly restore DNS settings on network interfaces. Fixes issue #352.

2018.4-beta1

Added

• Allow packets to the fe80::/10 and fe02::/16 IPv6 networks when local network sharing is enabled.
  Should allow IPv6 over the LAN, and mDNS host discovery which in turn should allow Apple AirDrop
  and Handover among other IPv6 based LAN discovery services.

Linux

• Add support for DNS configuration using resolvconf.

Changed

• Logging in no longer requires a connection with the Mullvad API server.
• Replace repeated Disconnecting followed by Connecting notifications with a single
  Reconnecting notification.

Fixed

• Don't temporarily show the unsecured state in the GUI when the app is reconnecting or blocking.
• Periodically update list of relays in the GUI.
• Redact IPv6 address that start or end with double colons in problem reports.
• Improve tray icon response time by disabling the double click handling.

Security

• Prevent Electron from executing/navigating to files being drag-and-dropped onto the app GUI. This
  fixes MUL-01-001

2018.3

Changed

macOS

• Move the CLI binary (mullvad) back into the Resources/ directory. A bug caused the app to not
  be signed if it was placed in the app root directory.

Security

Windows

• Lock the installation directory to C:\Program Files\Mullvad VPN. This prevents potential local
  privilege escalation by ensuring all binaries executed by the SYSTEM user, as part of the
  Mullvad system service, are stored where unprivileged users can't modify them.

2018.3-beta1

Added

• Add option to enable or disable IPv6 on the tunnel interface. It's disabled by default.
• Log panics in the daemon to the log file.
• Warn in the Settings screen if a new version is available.
• Add a "blocked" state in the app that blocks the entire network and shows a message about what
  went wrong. Then it waits for user action.
• Add support for Ubuntu 14.04 and other distributions that use the Upstart init system.
• Make scrollbar thumb draggable.
• Ability to expand cities with multiple servers and configure the app to use a specific server.
• Add firewall rules allowing traffic to the SSDP/WS-discover multicast IP, 239.255.255.250, if
  local area network sharing is activated. This allows discovery of devices using these protocols.

macOS

• Add uninstall script that can uninstall and remove all the files installed by the app.

Windows

• Extend uninstaller to also remove logs, cache and optionally settings.
• Add installation log (%PROGRAMDATA%\Mullvad VPN\install.log).

Changed

• The "Buy more credit" button is changed to open a dedicated account login page instead of one
  having a create account form first.
• The CLI command to list relays is now shorter, mullvad relay list instead of
  mullvad relay list locations.
• Replace WebSockets with Unix domain sockets/Named pipes for IPC. The location
  of the socket can be controlled with MULLVAD_RPC_SOCKET_PATH.
• Update the relay list if it's out of date when the daemon starts.
• Move the CLI binary (mullvad) on macOS and Linux up one level, so it's installed directly into
  the app installation directory instead of the resource directory.

Fixed

• Fix incorrect window position when using external display.
• Don't auto-connect the daemon on start if no account token is set. This prevents the daemon from
  blocking all internet if logging out from the app.

Linux

• The app window is now shown in its previous location, instead of at the center of the screen.
• Remove daemon log, cache and configuration directories during full uninstallation of the app.
• Restart the daemon automatically on upgrade.
• Fix systemd unit file to support older versions of systemd (e.g., in Debian 8).

macOS

• Fix edge cases when window's arrow appeared misaligned and pointed to the wrong menubar item.
• Make the pkg installer kill any running GUI process after installation is done. Prevents
  accidentally running an old GUI with a newer daemon.

Windows

• Failing to restore DNS settings on daemon start does not make the daemon exit with an error, just
  log the error and continue.

2018.2

This stable release is identical to 2018.2-beta3

2018.2-beta3

Added

• Create a new UI log file for every UI execution session, and preserve the log from the previous
  session.
• Account token can be copied to the clipboard by clicking on it in the account settings screen.
• Automatically scroll to selected country/city in locations view.
• Show system notifications when connection state changes and the window is not visible.
• Add launch view displayed when connecting to system service.

Changed

• Format the expiry date and time using the system locale.
• Account tokens are now required to have at least ten digits.

macOS

• Rename directores for settings, logs and cache from mullvad-daemon to mullvad-vpn.

Windows

• Use local user directory to store system service settings and GUI electron cache, instead of the
  roaming user directory.
• Where the system service would use %LOCALAPPDATA%\Mullvad\Mullvad VPN\ it now just uses
  %LOCALAPPDATA%\Mullvad VPN\

Fixed

• Ignore empty strings as redaction requests in the problem report tool, to avoid adding redacted
  markers between every character of the log message.
• Previously logged in users won't be going through login view when restarting the app, instead
  will be taken straight to main view.

2018.2-beta2

Added

• Bundle the root CA signing the API and only trust that single one, limiting
  trust to a single root CA
• Add a unique UUID to problem reports. Makes it easier for Mullvad support staff to find reports.
• Add "auto-connect" setting in daemon, and make it configurable from CLI. Determines if the daemon
  should secure the network and start establishing a tunnel directly when it starts on boot.
• Add "auto-connect" and "auto-start" options to the application preferences view.

Windows

• Include version information (meta data) in executables and DLLs.
• Include manifest in daemon so it always runs with administrator privileges.
• Add sidebar graphic in installer/uninstaller.

Changed

• App now uses statically linked OpenSSL on all platforms.
• Add OpenVPN logs at the top of the problem report instead of middle, to aid support work.
• Lower per log size limit in the problem report to 128 kiB.
• Relay list is now updated periodically automatically, not only when the daemon starts.

Windows

• Rename tunnel interface to "Mullvad".
• Change tunnel interface metric for both IPv4 and IPv6.

Fixed

• Disable account input when logging in.
• Keep the user input in problem report form while the app runs, or until the report is successfully
  submitted.

Windows

• Hide the app icon from taskbar.
• Autohide the main window on focus loss.
• Loosen up firewall rules to allow incoming requests on tunnel interface.
• Properly stop the service, announcing errors to the system, in the event of initialization or
  runtime error.

2018.2-beta1

Added

• Refresh account expiration when account view becomes visible.
• Add tunnel subcommand to manage tunnel specific options in the CLI.
• Add support for passing the --mssfix argument to OpenVPN tunnels.
• Add details to mullvad CLI interface error for when it doesn't trust the RPC file.
• Include the last two OpenVPN logs in problem reports instead of only the last.
• Prevent two instances of the daemon to run at the same time.
• Add CLI command for fetching latest app versions and verifies whether the running version is
  supported.
• Add version subcommand in the CLI to show information about current versions.
• Add a flag to daemon to print log entries to standard output without timestamps.
• Filter out and ignore DNS lookup results for api.mullvad.net that are bogus (private etc.)
• Bundle the Mullvad API IP address with the app and introduce a disk cache fallback method for
  when DNS resolution fails.
• Automatic rotation of the daemon log. The existing log is renamed to daemon.old.log on daemon
  startup.
• Add status listen subcommand in the CLI to continuously monitor the tunnel state.
• Log errors present in initialization sequence to the log file.

macOS

• Add colors to terminal output.
• Warn if daemon is running as a non-root user.
• Make the pkg installer uninstall any <=2018.1 version of the app before installing itself.

Changed

• Changed "Contact support" label to "Report a problem" in settings menu
• Change all occurrences of "MullvadVPN" into "Mullvad VPN", this affects
  paths and window captions etc.
• Improve account token hint to be the same length as an expected token.
• Update problem-report binary to automatically collect log files in predefined known Mullvad log
  directories.
• Replaced previously bundled OpenVPN 2.4.4 with statically linked 2.4.6 version containing
  Mullvad patches for faster connect and other improvements.
• Increase the OpenVPN receive and send buffers from 524288 to 1048576 bytes (1MiB).
• Make the log, cache, settings and RPC address directories configurable via the following
  environment variables: MULLVAD_LOG_DIR, MULLVAD_CACHE_DIR, MULLVAD_SETTINGS_DIR and
  MULLVAD_RPC_ADDRESS_PATH.

macOS

• The installer changed from dmg to pkg format.
• The daemon is installed as a launchd daemon and started on install and on boot.
• Move daemon logs to /var/log/mullvad-daemon/, settings to /etc/mullvad-daemon/ and cache to
  /var/root/Library/Caches/mullvad-daemon/.

Removed

• Remove the shutdown command from the CLI.

Fixed

• Fix scroll flickering.
• Fix bug in account input field that advanced the cursor to the end regardless its prior position.
• Redact all 16 digit numbers from problem report logs. Extra safety against accidentally sending
  account numbers.
• Fix OpenVPN plugin search directory to be the installation directory.
• Reduce RPC timeout to Mullvad API server.
• Fix OpenVPN warning about usage of AES-256-CBC cipher.
• Fix "Out of time" screen status icon position.
• If necessary, create parent directories for RPC connection info file and tunnel log.
• Fix error message when attempting to login when the daemon isn't running .

2018.1

Changed

• Redact all account numbers in the account number history from problem reports instead of only the
  currently logged in one.

Fixed

• Increase a timeout for problem report collection to fix a timeout error on slower machines.
• Fix a memory leak in the problem report collection routine.
• Fix an issue when viewing a problem report brought up a dialog to choose the application to open
  the file.

2018.1-beta10

[2018.1-beta10] - 2018-02-13

Added

• Show the app version in the settings view.

Changed

• Require confirmation when sending problem reports without an email address.

Fixed

• Fix erroneous styles in the settings view.

Security

• Update the CRL with newly revoked server certificates.