[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#866769: marked as done (keepassx fails to clear KDE clipboard history, leaving passwords visible)

Your message dated Tue, 30 Sep 2025 10:59:45 +0000
with message-id <[🔎] E1v3Y5B-003A8a-1E@fasolo.debian.org>
and subject line Bug#1116505: Removed package(s) from unstable
has caused the Debian Bug report #866769,
regarding keepassx fails to clear KDE clipboard history, leaving passwords visible
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
866769: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866769
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: keepassx
Version: 2.0.3-1
Severity: grave
Tags: security
Justification: user security hole

Dear Maintainer,

keepassx 2.0.3-1 (in Debian "stretch") fails to clear the clipboard history after a password has been copied to the clipboard.

The keepassx security settings has "Clear clipboard after 10 seconds" enabled.

To reproduce,
- select an entry with a stored password in the keepassx database
- press ctrl-C to copy the password to the clipboard
- after 10 seconds (default setting), the password should disappear from the clipboard history
- click on the clipboard icon in the panel, the password is visible

This is using the KDE Desktop installation, and hence the KDE clipboard.

The KDE clipboard has a setting to prevent the clipboard from being emptied, but this setting does not change the behaviour.


-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages keepassx depends on:
ii  libc6        2.24-11+deb9u1
ii  libgcrypt20  1.7.6-2
ii  libqtcore4   4:4.8.7+dfsg-11
ii  libqtgui4    4:4.8.7+dfsg-11
ii  libstdc++6   6.3.0-18
ii  libx11-6     2:1.6.4-3
ii  libxi6       2:1.7.9-1
ii  libxtst6     2:1.2.3-1
ii  zlib1g       1:1.2.8.dfsg-5

keepassx recommends no packages.

keepassx suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message --- 
Version: 2.0.3+keepassxc1+rm

Dear submitter,

as the package keepassx has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1116505

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)

--- End Message ---
Reply to: