Versie 2.8.0 van de open source wachtwoordmanager KeePassXC is uitgekomen. Het programma is een afgeleide van KeePass Password Safe en wordt ontwikkeld in C++ met Qt voor het grafische deel waarmee het op Linux, macOS en Windows een passend uiterlijk biedt. Met KeePassXC kunnen accounts worden opgeslagen met alle bijbehorende gegevens, zoals gebruikersnaam, wachtwoord en URL. Alle gegevens worden veilig in een met aes, twofish of ChaCha20 versleutelde database opgeslagen. Verder kan het programma automatisch wachtwoorden genereren en lijsten im- en exporteren. In deze uitgave zijn de volgende veranderingen en verbeteringen doorgevoerd:
KeePassXC 2.8.0 releasedThe new release brings a lot of long-awaited new features, many bugfixes, and several security updates. Among the major features are the migration from Qt5 to Qt6, Auto-Type on Wayland (Linux), configurable keyboard shortcuts, remote database synchronization with external tools, quick unlock with password on macOS, and quick unlock via Polkit on Linux. Version 2.8.0 is also the first version for which we ship native ARM64 builds for Windows and an experimental AArch64 (i.e., ARM64) AppImage for Linux
Besides these major features and changes, we also fixed many bugs present in the previous releases and improved the overall stability and user experience. We now show suggestions when adding additional attributes, added passkey and TOTP entry counts to the database statistics, fixed the password font size not following the application font size, improved the AppImage desktop integration, and much more. The complete changelog can be found below.
Notable changes since the Beta release are:
- Support for global settings enforcement via Group Policy overrides on Windows.
- AppImage TLS improvements (you should see fewer errors when downloading Favicons or checking for updates now).
- The new AArch64 AppImage.
- Several small bug fixes, most importantly concerning the ARM64 Windows build and a Wayland clipboard clearing bug.
Besides these changes, the stable release is mostly identical to the previous Beta release. Moreover, we already announced and fixed the following vulnerabilities in the Beta version. Version 2.8.0 now makes the fixes available to all users. Unfortunately, more than a month after we requested them, GitHub has still not assigned CVE identifiers to most of these issues. We are linking the GitHub advisories here and will update the changelog with the CVE numbers once they are available.
- Fix use-after-free when importing crafted KDB files (CVE-2026-69150)
- Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING)
- Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-PENDING)
- Windows: Randomize shared memory mapping names when sending SSH keys to Pageant (CVE-PENDING)
- Fix integer overflow and out-of-bounds read in legacy KDB importer (CVE-PENDING)
All versions of KeePassXC 2.7.x (and earlier) are affected. The CVEs are rated low to moderate severity. None of the vulnerabilities concern the security of KeePassXC’s core functionality or cryptography, but we recommend users update to the new version. Also, none of the issues were introduced by AI-generated code, but AI assisted in finding them.
/i/2005768592.png?f=imagegallery)
:strip_exif()/i/2005768592.png?f=thumbmedium)
:strip_exif()/u/65519/ava.gif?f=community)
:strip_icc():strip_exif()/u/612605/crop56ce1c7847a02_cropped.jpeg?f=community)
/u/77735/crop573478d967f3a.png?f=community)