A lot of good stuff for wayland and also security fixes

https://goodtech.info/keepassxc-2-8-saisie-automatique-wayland-linux-securite/
https://github.com/keepassxreboot/keepassxc/releases/tag/2.8.0

Security Fixes

    Fix use-after-free when importing crafted KDB files (CVE-2026-69150; Credits: A. Ramos (@aramosf)) [#13500]
    Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING; Credits: Davonte (@BadPingHere)) [#13580, #13670, #13688]
    Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-PENDING; Credits: @sigure21) [#13679]
    Windows: Randomize shared memory mapping names when sending SSH keys to Pageant (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13680]
    Fix integer overflow and out-of-bounds read in legacy KDB importer (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13682]
    Secret Service: Exclude protected attributes from attribute listings (Credits: Koda Reef (@kodareef5)) [#13674]
    Windows: Fix clipboard exclusion format name (Credits: @ByeWhiteLists) [#13352]
    Improve clearing of decrypted database fragments from memory used by zlib [#13677]

We believe that the bug you reported is fixed in the latest version of
keepassxc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1152447@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julian Andres Klode <jak@debian.org> (supplier of updated keepassxc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 29 Oct 2026 16:12:11 +0100
Source: keepassxc
Architecture: source
Version: 2.8.0+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: keepassxc maintainers <keepassxc@packages.debian.org>
Changed-By: Julian Andres Klode <jak@debian.org>
Closes: 1053396 1152447
Changes:
 keepassxc (2.8.0+dfsg1-1) unstable; urgency=medium
 .
   * New upstream version 2.8.0+dfsg1 (Closes: #1152447, #1053396)
   * debian/watch: Use GitHub API to find release tarballs
   * Switch to Qt 6 and update build dependencies
   * debian/rules: Update cmake feature flags for 2.8.0
   * Rebase patches, drop Botan 3.10 patch merged upstream
   * d/copyright: Merge with upstream COPYING
Checksums-Sha1:
 e14f3e2cda1689aa15780c7e1db8ddb47eb3b78b 2624 keepassxc_2.8.0+dfsg1-1.dsc
 d5110437c166e7b9f3e43ddb21d00d7fa8efe341 9655188 keepassxc_2.8.0+dfsg1.orig.tar.xz
 172649a6795ebc35ee54dd43f76de88289e1f25f 25720 keepassxc_2.8.0+dfsg1-1.debian.tar.xz
 31d711b9d3cb49d354e2f4d05d64d2173451514b 14636 keepassxc_2.8.0+dfsg1-1_source.buildinfo
Checksums-Sha256:
 419e40eea2c6ca7835dbeeaa9a0b503028094bea0ca5e8ba087b3bfd5819381f 2624 keepassxc_2.8.0+dfsg1-1.dsc
 41b97e3ba44ff5b6009994127a2ac5a3d42f99363215974a0b96285d86bf6697 9655188 keepassxc_2.8.0+dfsg1.orig.tar.xz
 1d43bf59cc33334121f095065dfa31a26b4cc193fb6e68eb16fb850347b6c854 25720 keepassxc_2.8.0+dfsg1-1.debian.tar.xz
 9488c0288c1f15183a5937e785ff27abe77cf902a198f27681656c9697f41836 14636 keepassxc_2.8.0+dfsg1-1_source.buildinfo
Files:
 fc62ff705b8e5eed04293756fdfcb8e2 2624 utils optional keepassxc_2.8.0+dfsg1-1.dsc
 4d4e918a2cbcf83c932652f948f3270b 9655188 utils optional keepassxc_2.8.0+dfsg1.orig.tar.xz
 7cad297754bec3a7847f956b8f75d184 25720 utils optional keepassxc_2.8.0+dfsg1-1.debian.tar.xz
 5f686c1e3847a97c7f6f6219f4035246 14636 utils optional keepassxc_2.8.0+dfsg1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=H1AV
-----END PGP SIGNATURE-----