Posted on in Releases
Today, we are releasing KeePassXC 2.7.12 with several bug fixes and some enhancements.
KeePassXC now supports {TIMEOTP} as an Auto-Type placeholder, the browser access confirm dialog now shows matched URLs in a tooltip, we added support for nested folders in Bitwarden imports, and Passkeys now store their backup elegibility (BE) and backup state (BS) flags. We also added mitigations to prevent DLL injection attacks via malicious OpenSSL config files on Windows.
Important note about the new passkey flags: Previously, the BE and BS flags were hard-coded to false. We now default to true and store the values with the entry for new passkeys. This may break existing passkeys for which the flags were not stored, since the values are considered immutable. To fix this, users can add the following two string attributes to an entry (under “Advanced”): KPEX_PASSKEY_FLAG_BE=0 and KPEX_PASSKEY_FLAG_BS=0 to restore the previous behaviour.
Changelog
Following is a list of changes in this release. You can view the entire list of changes also on the 2.7.12 Release Page.
Changes
- Passkeys: Set BE and BS flags to true (NOTE: MAY BREAK EXISTING PASSKEYS) [#13042]
- Support TIMEOTP Auto-Type and entry placeholder [#13117]
- Browser: Show URLs in browser access dialog [#12906]
- Bitwarden Import: Add support for nested folders [#13081]
Fixes
- Prevent exploits through OpenSSL configurations [#13118, #13124]
- Auto-Type: Revert change that caused race condition on Linux [#12738]
- Auto-Type: Fix help button enablement [#12937]
- Browser: Fix showing correct checkbox value in entry Browser Integration settings [#12980]
- Browser: Fix setting browser related values to customData [#13026]
- Passkeys: Add publicKey to register response [#12757]
- Fix main entry URL validation when using placeholders [#12964]
- Fix minor font and theme issues [#12814]
- Fix ‘Remove’ button in Plugin Data being enabled when no row is selected [#12916]
- Sanitize attachment file names before saving [#13114]
Download
The new release can be downloaded from our downloads page, the Microsoft Store, our Ubuntu PPA, and Flathub.
Feedback
Please report any bugs you encounter at our GitHub issue tracker. We are also available on Matrix for real-time feedback and discussions. See our contact page for further options.