Added
- Package signing and update authenticity hardening for supported Linux packages.
Improved
- Windows helper IPC parameter validation to reduce local IPC attack surface.
- Linux helper IPC/API hardening after EGL gid-check bypass review.
- Belarusian translations in the desktop app, installer, and CLI from GitHub user
dubovy-achvelak. - Proxy Gateway privacy by no longer logging blocked destinations for HTTP and SOCKS gateway requests.
- IP Stack preference wording to clarify it applies to WireGuard only.
- Preferences title casing consistency.
- Sign Up screen helper text styling under the Password and Email fields.
- JSON/INI import consistency for proxy sharing and MAC spoofing settings.
Fixed
- Linux IPv6 split-tunnel routes being added without the required interface name.
- Linux IPv6 DNS leak protection missing ip6tables rules for IPv6 DNS resolvers.
- Linux split-tunneling process monitor skipping proc events after the first netlink read.
- Linux split-tunneling setup failures being reported as successful.
- Persistent Ignore SSL Errors preference behavior so TLS validation bypass is runtime-only and does not survive app restart.
- AmneziaWG custom WireGuard I-values allowing newline/config injection in imported custom configs.
- Malformed OpenVPN inline tags bypassing custom config directive filtering.
- Connected DNS Custom 0.0.0.0 breaking local ctrld resolver behavior while connected.
- Split tunneling disabled message handling on macOS.
GUI Installer Hashes
| Installer | SHA-256 hash |
|---|---|
| Windows amd64 | d9020541bef258850382ce31aa36b0dac9ec75d92fd41192d55b1233439eeb70 |
| Windows arm64 | c6f4d2ad42f332523159b38b59f499df3abd541e6ff6ceeb567bd7a3f8257ae8 |
| macOS universal | 1b57b0a50b4cd8163682129c5d189f76d9af8ed06c49b0cd179900243fc59aef |
| Ubuntu amd64 | 8b7bca9e75a2e9126051165543ce73681ed687b4e49435b94dfca3a9b6e64b1b |
| Ubuntu arm64 | de098cbf65599d2d79bc8934ac88074382008fffe0b9804a7dcd724fe226147d |
| Fedora amd64 | f0f856de4071613641928483014c9af9e039c88190e552f1756e95fd70468e4b |
| Fedora arm64 | 53d716f5865e56fc3c293049a158f263d6d1b427811fea76a9c6f009b626a287 |
| OpenSUSE amd64 | 57041f5a206730f9bc767f59f29c48e4f127fd2b6f7280138d9f430ed90bc884 |
| Arch Linux amd64 | ffda63bb3b12da60a14b0c9429992c4ca46f4800ad35a437b5097910c03d82be |
CLI Installer Hashes
| Installer | SHA-256 hash |
|---|---|
| Ubuntu CLI amd64 | 6b624bf815e97356c427de11bfd98193ecb8e62c886686024ecb3b3631a07a8d |
| Ubuntu CLI arm64 | 4fdac28d4c4ab5ce0fdbb313dc120c311a1b66004e6f212b5a4b544472c2aa7b |
| Fedora CLI amd64 | 4cfa0d8de4ec5f7aa86e9e41d81b9327f093dde29a28e483fd1f11b329df62fe |
| Fedora CLI arm64 | b60afe55f2711bf307bf9f5a33b0d3e7bdffbdb44a0d0e2058edc8534b0177a7 |
| OpenSUSE CLI amd64 | 23bd45ed7ff06ad9cc5a9a7690d6aca2d62fcb34e53b44c8b785f7fc6c535027 |
| Arch Linux CLI amd64 | ca18e7c43ac434b352df3290124480ed53aaf31b0de89394f83fa79b99845d88 |