Jeffrey Paul

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 watchOS versions prior to 8.7 **Description** A user in a privileged network position can track a user’s activity. This issue was addressed by using HTTPS when sending information over the network. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8. For Security Update versions prior to 2022-005 Catalina, apply Security Update 2022-005 Catalina. For iOS versions prior to 15.6, update to iOS 15.6. For iPadOS versions prior to 15.6, update to iPadOS 15.6. For tvOS versions prior to 15.6, update to tvOS 15.6. For watchOS versions prior to 8.7, update to watchOS 8.7.

**Name of the Vulnerable Software and Affected Versions** Keybase app version 2.13.2 for iOS **Description** The issue concerns potentially insufficient notice that the app is using a user's private key to sign a cryptocurrency attestation for Stellar payments. This might be incompatible with a user's personal position on the semantics of an attestation. **Recommendations** For Keybase app version 2.13.2, consider reviewing the app's settings and documentation to understand how it handles private keys and cryptocurrency attestations, and adjust usage accordingly to align with personal preferences on attestation semantics. At the moment, there is no information about a newer version that contains a fix for this vulnerability.