mullvad/mullvadvpn-app 2020.5-beta2

on GitHub

Added

Android

• Add buttons to buy credit and redeem voucher in Account screen.
• Show a notification banner warning when the account time will soon run out.

Changed

• Send an ICMP reject message or TCP reset packet when blocking outgoing packets to prevent
  timeouts.

macOS

• Use SCNetworkReachability to help determine connectivity of host. Helps bring the app online
  faster when the computer wakes up from sleep.

Android

• Show the remaining account time in the Settings screen in days if it's less than 3 months.
• Prevent commands to connect or disconnect to be sent when the device is locked.
• Make all screens scrollable to better handle small screens and split-screen mode.

Fixed

• Show both WireGuard and OpenVPN servers in location list when protocol is set to automatic on
  Linux and macOS.
• Fix missing in app notification about unsupported version.
• Prevent auto-connect on login if the account is out of time.
• Fix race that caused WireGuard key upload to fail which could cause the "too many keys" error and
  the tunnel to invalidly fall back to OpenVPN.

Android

• Fix crash when that happened sometimes when the app tried to start the daemon service on recent
  Android versions.
• Fix quitting the app sometimes failing.
• Fix WireGuard key status events being lost by the UI, causing stale information to be shown.
• Fix time left in account not showing in settings screen.
• Fix attempt to connect when the app doesn't have the VPN permission.
• Fix crash that happened sometimes when the WireGuard key was loaded too quickly.
• Fix crash when entering split-screen mode whilst on the Report a Problem screen.
• Fix invalid back stack history when connection to service is lost and the app returns to the
  launch screen.
• Fix app leaving settings screen when entering split-screen mode.
• Fix app sometimes leaving Welcome screen prematurely after creating an account.

Windows

• Fix race in network adapter monitor that could result in data corruption and crashes.
• Upgrade miow dependency to stop daemon from crashing when the management interface named pipes
  were accessed with accesschk.exe and some web browsers.
• Fix race that may rarely occur during install when obtaining the GUID of a newly created TAP
  adapter.

Security

• Tighten the firewall rules that were allowing traffic to the relay server over the physical
  network interface. On Linux and macOS now only processes running under root are allowed to send
  traffic to this port and IP. On Windows only the Mullvad VPN binaries are allowed to send.
  This fixes audit ticket MUL-02-002.

Windows

• Tighten the firewall rule allowing traffic on port 53 to the relay server IP on the physical
  interfaces if the VPN tunnel is established on port 53 to only allow UDP. This fixes
  audit ticket MUL-02-004.
• Deny access to the management interface named pipe for the NT AUTHORITY\NETWORK group.
  This makes the named pipe no longer accessible under the IPC$ network share.
  This fixes audit ticket MUL-02-007.

Android

• Ignore touch events when another view is shown on top of the app in order to prevent tapjacking
  attacks. Fixes audit ticket MUL-02-003.
• Prevent screens showing potentially sensitive data from being recorded. Fixes audit
  ticket MUL-02-003.