2019.4-beta1

Added

• When IPv6 is enabled, get both exit IP versions from am.i.mullvad.net and show.
• Add translations for country and city names in the relay list and map.

Fixed

• Reset the tray icon padlock to the unsecured state when losing connectivity with the daemon.

Windows

• Increase timeout when updating DNS settings. Should make the DNS management fail less often.
• Use dynamic naming of TAP adapter to avoid collisions with existing adapters.
• On Windows Surface devices the keyboard now shows up correctly when selecting the account
  token input field.

Security

Windows

• Make the firewall rules permanent until reboot, or until the daemon removes them. Should make
  the kill switch active even if the daemon dies unexpectedly.

2019.3

Fixed

Windows

• Correct dependencies on installer logger plugin to resolve installation issues on Windows 7/8.

2019.2

Removed

• Remove the Mullvad OpenVPN intermediate transition CA. Used when transitioning from the old to
  the new root CA. Now the app only bundles and trust the new Mullvad root CA valid until 2028.

Fixed

• Read the relay list from cache only if it's newer than the version bundled in the app.

The rest is identical to 2019.2-beta1, see that change log for all changes since last stable release.

2019.2-beta1

Added

• Integrate initial Shadowsocks proxy support. Accessible via CLI.
• Add initial Wireguard support on macOS and Linux. Accessible via CLI.
• Improve "Out of time" view button leading to the account website by unlocking internet access
  before opening the browser
• Add translations for German, Spanish, French, Swedish, Chinese languages

Fixed

• Fix the potential reconnect loop in GUI, triggered by the timeout when receiving
  the initial state of the daemon.
• Fix the bug which caused the account token history to remain stale after logout.
• Fix some notifications not appearing depending on how the window is shown and hidden while the
  tunnel state changes.
• Fix DNS when using IPv6.
• Fix the bug when the "Out of time" view remained visible, even when the app managed to reconnect
  the VPN tunnel after a successful credit top-up.
• Sort the relay location list alphabetically in the GUI.

Linux

• Fix startup failure when network device with a hardware address that's not a MAC address is
  present.

Windows

• Improve error handling related to DNS management at the time of establishing the tunnel.

Changed

• Increase the timeout to the Mullvad API from 5 to 10 seconds.

Linux

• Increase NetworkManager DBus RPC timeout from 1 second to 3 seconds.
• Improve notification look by adding application name and icon.

2019.1

This release is identical to 2019.1-beta1

2019.1-beta1

Added

• Handle "block when disconnected" extra kill-switch level in the GUI, showing the disconnected
  state as blocked when appropriate and also having a toggle switch for the setting in the Advanced
  Settings screen.
• Add a drop-down warning to notify the user when the account credits are running low.
• Allow the 169.254.0.0/16 private network in addition to the other networks allowed when local
  network sharing is enabled.
• Improve the confirmation dialog when submitting a bug report without an email specified.

macOS

• Add a monochromatic tray icon option for the GUI.

Linux

• Detect if the computer is offline. If so, don't sit in a reconnect loop, instead block and show
  an error message.
• Add a toggle switch to allow the app to start minimized on Linux, so that only the tray icon is
  initially visible.

Changed

• Disable buttons and menus that open external links when the app knows that there is no internet
  connection.
• The auto-start and auto-connect toggles in the GUI have been reworked so that auto-connect
  configures the GUI to automatically connect when it starts and so that it will only auto-connect
  on boot when both settings are set.

Fixed

• Stop GUI from glitching during the short reconnect state.
• Dismiss notifications automatically after four seconds in all platforms.
• Fix error printed from the CLI when issuing relay update.
• Fix relay list update interval. Should now handle sleep better.
• Prevent GUI from sending connect commands to the daemon every time it establishes a connection to
  it. Only send connect once (if auto-connect is enabled.)
• Prevent possible reconnect loop where the GUI would indefinitely reconnect to the daemon.
• Fix the bug which enabled users to return to the login view if they went to settings while
  logging in.
• Handle in the GUI, if something external changes the account token in the daemon. I.e. triggered
  by CLI unsetting or resetting it.

Linux

• Fix Debian package not upgrading properly due to a bug in the post-remove script.
• Wait for NetworkManager and systemd-resolved services to start before daemon starts on platforms
  with systemd and those two services. Prevents the daemon from using the wrong DNS API.

Windows

• Gracefully block when TAP adapter is missing or disabled, instead of retrying to connect.

Security

Linux

• Poll netfilter to verify firewall rules were added correctly. On Ubuntu 14.04 netfilter did not
  return any error, but it also ignored the rules the daemon tried to add.

2018.6

This release is identical to 2018.6-beta1

2018.6-beta1

Added

• CLI command relay update that triggers an update of the relay list in the daemon.
• Add extra level of kill-switch called "block when disconnected". Blocks all network traffic even
  in the disconnected state. Not activated by default and can be changed via the CLI subcommand
  block-when-disconnected.
• Ability to debug firewall rules on macOS with the TALPID_FIREWALL_DEBUG variable.

macOS

• Detect if the computer is offline. If so, don't sit in a reconnect loop, instead block and show
  an error message.

Windows

• Install tray icon in visible part of the notification area.

Changed

• Split DNS management from Firewall management to allow restoring DNS earlier and showing more
  detailed errors to users.

Fixed

• Cancel pending system notifications when the app becomes visible.
• Transition to connected state after all routes are configured. Avoids problems with reaching the
  internet directly after the app says it's connected.
• Disable keep alive on API RPC requests. Should stop reuse of invalid sockets after tunnel state
  changes.

macOS

• Fix permissions on log dir so problem-report tool has permission to read daemon logs.

Windows

• Use proper app id in the registry. This avoids false-positives with certain anti-virus software.
• Handle sleep/resume events to quickly restore the tunnel when the machine wakes up.
• Add default route to fix NLA issues (Microsoft Store/Office/etc say the machine is offline).
• Update installer to not rely on WMI when enumerating network adapters.
• Increase timeout waiting for OpenVPN to shut down cleanly.
• Sign the bundled openvpn.exe binary. Should make some anti-virus software complain less.

2018.5

Changed

• Replace OpenVPN root CA certificate bundled with the app to the new Mullvad root CA.

Fixed

Linux

• Improve packaging on RPM based distros by re-enabling the daemon after an upgrade

2018.5-beta1

Added

• Fall back and try to connect over TCP port 443 if protocol is set to automatic and two attempts
  with UDP fail in a row. If that also fails, alternate between UDP and TCP with random ports.
• Add new system and in-app notifications to inform the user when the app becomes outdated,
  unsupported or may have security issues.
• Allow the user to view the relay in/out IP address in the GUI.
• Add OpenVPN proxy support via CLI.
• Allow DHCPv6 in the firewall.

Fixed

• Pick new random relay for each reconnect attempt instead of just retrying with the same one.
• Make the problem-report tool fall back to the bundled API IP if DNS resolution fails.

macOS

• Correctly backup and restore search domains and other DNS settings.

Linux

• Disable GPU acceleration on Linux to fix App on Ubuntu 14.04 and other older distributions.
• Improve DNS management detection. Evaluates which way the system handles DNS before each new
  VPN tunnel is established instead of only on computer boot.
• Set DNS search domain when using the systemd-resolved. Makes it work on Ubuntu 18.10.

Windows

• Fix crash on Windows 7 when closing installer.

Security

Linux

• Block all traffic to DNS servers other than the correct one in the tunnel. Stops potential DNS
  leaks when "Local network sharing" was enabled and DNS management failed.