Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 3 sources · 29 days · First seen about 1 month ago · Last updated 3 days ago

KeePassXC software updates and security patches

Overview

The open-source password manager KeePassXC transitioned from the release of version 2.8.0-beta1 to the stable release of version 2.8.

Both updates centered on a major technical migration from Qt5 to Qt6 to improve graphics and multi-monitor performance. Key functional improvements for Linux users included native Auto-Type support within Wayland sessions via XDG Desktop Portals and a Polkit-based ‘Quick Unlock’ feature for fingerprint authentication. The software also introduced remote database synchronization via SFTP or SCP, native ARM64 builds for Windows, and an integrated SSH Agent capable of generating RSA, ECDSA, and Ed25519 keys.

The stable 2.8 release specifically addressed five security vulnerabilities identified in versions 2.7.x and earlier. These included a use-after-free error during legacy KDB database imports (CVE-2026-69150), browser-integration issues, and a Windows-specific concern regarding SSH key sharing with Pageant. Developers noted that while AI-assisted analysis helped identify these flaws, none originated from AI-generated code.

Entities

windows · KeePassXC · Linux · Wayland · Qt

Claims

What the coverage asserts, and how many sources carry each claim.

[● 3 SOURCES] KeePassXC has released version 2.8. www.it-boltwise.de · www.deskmodder.de · linuxiac.com
[● 3 SOURCES] The software migrated from Qt 5 to Qt 6. www.it-boltwise.de · www.deskmodder.de · linuxiac.com
[● 3 SOURCES] Auto-Type functionality now works on Linux Wayland using XDG Desktop Portals. www.it-boltwise.de · www.deskmodder.de · linuxiac.com
[● 3 SOURCES] A Quick Unlock feature has been added for Linux using Polkit. www.it-boltwise.de · www.deskmodder.de · linuxiac.com
[● 2 SOURCES] The update includes native ARM support for Windows. www.deskmodder.de · linuxiac.com
[● 2 SOURCES] The integrated SSH Agent can generate RSA, ECDSA, and Ed25519 keys. www.deskmodder.de · linuxiac.com
[● 2 SOURCES] CVE-2026-69150 is a use-after-free error related to importing KDB files. www.deskmodder.de · linuxiac.com
[○ 1 SOURCE] Five security vulnerabilities in versions 2.7.x and earlier were fixed. linuxiac.com

Timeline

3 days ago

[TECHNOLOGY] 3 sources
KeePassXC releases version 2.8 with Wayland and Qt 6 support
KeePassXC 2.8 is released, featuring a migration to Qt 6, Wayland Auto-Type support for Linux, native ARM support, and security fixes for several low-to-moderate severity vulnerabilities.
about 1 month ago

[TECHNOLOGY] 2 sources
KeePassXC releases 2.8.0-beta1 with Qt6 and Wayland support
KeePassXC has released version 2.8.0-beta1, featuring a Qt6 UI migration, native Wayland Auto-Type support, remote database synchronization via SFTP/SCP, and native ARM64 support for Windows.

Sources

deskmodder.de · it-boltwise.de · linuxiac.com