summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2025-07-16 10:14:33 +0200
committerDavid Lönnhager <david.l@mullvad.net>2025-07-16 16:22:09 +0200
commit64cd75e4787f4dc02f8ec66a84b9cc25cc720548 (patch)
tree31ae1d310755292f2708533a80d8357af7c2c198
parentbbf2824de5dd5a828677420daf6a63983241b1c4 (diff)
downloadmullvadvpn-64cd75e4787f4dc02f8ec66a84b9cc25cc720548.tar.xz
mullvadvpn-64cd75e4787f4dc02f8ec66a84b9cc25cc720548.zip
Update changelog to mention ownership check
-rw-r--r--CHANGELOG.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9cfb353c35..07e9588f11 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -49,6 +49,9 @@ Line wrap the file at 100 chars. Th
- Add grace period when best default route goes away to reduce frequency of random reconnects.
### Security
+- Prevent unprivileged users from impersonating the gRPC server. This was relatively harmless
+ previously but is required due to in-app updates.
+
#### Windows
- Enable control flow integrity checks (CFG) for some C++ code. This excludes `wintun`,
`wireguard-nt`, and OpenVPN. This addresses `MLLVD-CR-24-101` to the extent that we found