android/2023.10

Here is a list of all changes since last stable release android/2023.9:

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.10-beta1

This release is for Android only.

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

2023.6

This release is for desktop only.

Here is a list of all changes since last stable release 2023.5.

Added

• Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
• Add custom lists to location selector in desktop app.
• Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  proxy API traffic through a peer before connecting to a tunnel. They are managed through
  mullvad api-access, and the initially supported network protocols are Shadowsocks and
  SOCKS5.
• Add social media content blocker.
• Add ability to override server IPs to the CLI.

Changed

• Update Electron from 25.2.0 to 26.3.0.
• Update OpenVPN to 2.6.8 from 2.6.0.

Linux

• Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.

Removed

Windows

• Remove wireguard-go (userspace WireGuard) support.

Fixed

• Show correct endpoint in CLI for custom relays.
• Lower risk of being rate limited.
• Fix error dialog when failing to write to console by handling the thrown error.
• Fix error dialog displayed when the daemon was killed.
• Fix desktop app freezing when navigations occur in very quick succession.

Windows

• Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).

Security

• Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.

Windows

• Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  the directory in ProgramData (CVE-2023-50446).

android/2023.9

This release is for Android only. Here is a list of all changes since last stable release android/2023.8:

Added

Android

• Add missing translations for in-app purchases and a few settings.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.8

This release is for Android only. Here is a list of all changes since last stable release android/2023.7:

Added

Android

• Add Google Play in-app purchases to the build distributed via Google Play.
• Add social media content blocker.
• Add support for setting per-app language in system settings.
• Add share and copy button to the log view which can be used to copy or in other ways share the log text.
  This was partially added to due to limitations in Compose which result in it not being possible to
  select and copy text in the log view.

Changed

Android

• Improve device and expiry information throughout the app.
• Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs,
  voucher dialog, in-app notifications).

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.8-beta2

This release is for Android only.

Here is a list of changes:

Fixed

Android

• Fix top bar flickering in some scrollable views.
• Fix welcome screen sometimes showing on app restart after adding time.
• Fix inconsistencies with the account history in the login view.
• Fix OS crash when sharing long logs by instead sharing the log content as a file.
• Improve in-app purchase and verification flow in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

2023.6-beta1

This release is for desktop only.

Here is a list of all changes since 2023.5.

Added

• Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
• Add custom lists to location selector in desktop app.
• Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  proxy API traffic through a peer before connecting to a tunnel. They are managed through
  mullvad api-access, and the initially supported network protocols are Shadowsocks and
  SOCKS5.
• Add social media content blocker.
• Add ability to override server IPs to the CLI.

Changed

• Update Electron from 25.2.0 to 26.3.0.

Linux

• Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.

Removed

Windows

• Remove wireguard-go (userspace WireGuard) support.

Fixed

• Show correct endpoint in CLI for custom relays.
• Lower risk of being rate limited.
• Fix error dialog when failing to write to console by handling the thrown error.
• Fix error dialog displayed when the daemon was killed.
• Fix desktop app freezing when navigations occur in very quick succession.

Windows

• Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).

Security

Windows

• Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  the directory in ProgramData (CVE-2023-50446).

android/2023.8-beta1

This release is for Android only.

Here is a list of changes:

Changed

Android

• Add Google Play in-app purchases to the build distributed via Google Play.
• Add social media content blocker.
• Add support for setting per-app language in system settings.
• Improve device and expiry information throughout the app.
• Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs voucher dialog, in-app notifications).
• Add share button to the log view which can be used to copy or in other ways share the log text. This was partially added due to limitations in Compose which result in it not being possible to select and copy text in the log view.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.7

This release is for Android only.

Here is a list of all changes since last stable release android/2023.6:

Changed

Android

• Minor addition to problem report logs to aid debugging of user issues.

2023.5

This release is for desktop only.

Changes since 2023.5-beta2:

• Start signing the deb and rpm files (GPG)
• Fix connectivity issues when switching between networks or disconnecting on macOS.

Here is a list of all changes since last stable release 2023.4.

Added

• Add --help and --version options to the desktop GUI application.
• Add creation date below device name in the device list screen.
• Add account view button in main view in the desktop app.
• Add time left and device name in the header bar in the desktop app.

Linux

• Start signing the deb and rpm files (GPG)

Changed

• In the CLI, update the tunnel subcommand to resemble relay more. For example, by adding a
  unified mullvad tunnel get command and removing individual get subcommands like
  mullvad tunnel ipv6 get.
• Update the CLI multihop settings to make it possible to set the entry location without toggling
  multihop on or off.
• In the CLI, the mullvad account get command will now print the account number (if there is one)
  after the device has been revoked.
• Update the CLI relay, multihop & bridge selection interface to accept a hostname as sole argument,
  inheriting the behavior of mullvad relay set hostname. This is in addition to accepting a
  geographical location as basis for filtering relays.
• Silence OpenVPN "replay attack" warnings.
• Update Electron from 23.2.0 to 25.2.0.

Windows

• In the CLI, add a unified mullvad split-tunnel get command to replace the old commands
  mullvad split-tunnel pid list and mullvad split-tunnel get.

Fixed

• Update relay list after logging in. Previously, if the user wasn't logged in when the daemon
  started, the relay list would only be updated after attempting to connect to the VPN.

macOS

• Fix inability to sync iCloud and Safari bookmarks while connected to the VPN.
• Ensure that the default tunnel route is added back after waking from hibernation. Previously, the
  tunnel became unusable despite the app appearing to be connected.
• Work around issue where the default route was lost after disconnecting after switching between
  networks.
• Fix slow offline detection.
• Fix inability to switch from a network to a higher-priority network without the tunnel timing out.
• Fix connectivity issues when switching between networks or disconnecting.

Removed

• Remove the CLI subcommand mullvad relay set hostname.