International Components for Unicode Invalid ISO Character Handling Vulnerability

Bugtraq ID:	29488
Class:	Input Validation Error
CVE:	CVE-2008-1036
Remote:	Yes
Local:	No
Published:	May 28 2008 12:00AM
Updated:	Apr 28 2009 10:56PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Pardus Linux 2008 0 ICU Project International Components for Unicode 3.8.1 ICU Project International Components for Unicode 3.8 ICU Project International Components for Unicode 3.6 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.5
Not Vulnerable:	ICU Project International Components for Unicode 4.0 Apple Mac OS X Server 10.5.3 Apple Mac OS X 10.5.3

International Components for Unicode Invalid ISO Character Handling Vulnerability

The International Components for Unicode (ICU) is prone to a vulnerability related to the handling of certain invalid character sequences.

An attacker may leverage this vulnerability to bypass content filters. This may lead to cross-site scripting attacks or the disclosure of sensitive information in some cases. Other attacks are also possible.

NOTE: This issue was previously covered in BID 29412 (Apple Mac OS X 2008-003 Multiple Security Vulnerabilities), but has been given its own record to better document the vulnerability.

NOTE: This BID was formerly titled 'Apple Mac OS X International Components for Unicode Information Disclosure Vulnerability', but has been updated to better reflect the issue and the underlying vulnerable component.

International Components for Unicode Invalid ISO Character Handling Vulnerability

An attacker may exploit this issue using readily available tools. For some attacks an attacker must entice an unsuspecting user to follow a malicious URI.

International Components for Unicode Invalid ISO Character Handling Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu icu-doc_3.6-3ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.6-3ubuntu0 .2_all.deb


• Ubuntu libicu36-dev_3.6-3ubuntu0.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36-dev_3.6-3ub untu0.2_powerpc.deb


• Ubuntu libicu36_3.6-3ubuntu0.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36_3.6-3ubuntu 0.2_powerpc.deb

Debian Linux 4.0 arm

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_arm.deb


• Debian libicu36_3.6-2etch2_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _arm.deb

Debian Linux 5.0 ia-64

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_ia64.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_ia64.deb


• Debian libicu38_3.8.1-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu icu-doc_3.8-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .1_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.1_powe rpc.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.1_po werpc.deb


• Ubuntu libicu38_3.8-6ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.1_powerp c.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu icu-doc_3.8.1-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.1_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.1_po werpc.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.1_ powerpc.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.1_powe rpc.deb

Debian Linux 4.0 powerpc

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_powerpc.deb


• Debian libicu36_3.6-2etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu icu-doc_3.8.1-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.1_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-2ub untu0.1_i386.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-2 ubuntu0.1_i386.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-2ubun tu0.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu icu-doc_3.8-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .1_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.1_spar c.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.1_sp arc.deb


• Ubuntu libicu38_3.8-6ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.1_sparc. deb

Debian Linux 4.0 m68k

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu icu-doc_3.4.1a-1ubuntu1.6.06.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.4.1a-1ubun tu1.6.06.2_all.deb


• Ubuntu libicu34-dev_3.4.1a-1ubuntu1.6.06.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34-dev_3.4.1a- 1ubuntu1.6.06.2_sparc.deb


• Ubuntu libicu34_3.4.1a-1ubuntu1.6.06.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34_3.4.1a-1ubu ntu1.6.06.2_sparc.deb

Debian Linux 5.0 alpha

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_alpha.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_alpha.deb


• Debian libicu38_3.8.1-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_i386.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_i386.deb


• Debian libicu38_3.8.1-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu icu-doc_3.8-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .1_all.deb


• Ubuntu lib32icu-dev_3.8-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu-dev_3.8-6ub untu0.1_amd64.deb


• Ubuntu lib32icu38_3.8-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu38_3.8-6ubun tu0.1_amd64.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8-6ubun tu0.1_amd64.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8-6ub untu0.1_amd64.deb


• Ubuntu libicu38_3.8-6ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8-6ubuntu 0.1_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu icu-doc_3.4.1a-1ubuntu1.6.06.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.4.1a-1ubun tu1.6.06.2_all.deb


• Ubuntu libicu34-dev_3.4.1a-1ubuntu1.6.06.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34-dev_3.4.1a- 1ubuntu1.6.06.2_powerpc.deb


• Ubuntu libicu34_3.4.1a-1ubuntu1.6.06.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34_3.4.1a-1ubu ntu1.6.06.2_powerpc.deb

Debian Linux 5.0 s/390

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_s390.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_s390.deb


• Debian libicu38_3.8.1-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_s390.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu icu-doc_3.6-3ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.6-3ubuntu0 .2_all.deb


• Ubuntu libicu36-dev_3.6-3ubuntu0.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36-dev_3.6-3ub untu0.2_sparc.deb


• Ubuntu libicu36_3.6-3ubuntu0.2_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36_3.6-3ubuntu 0.2_sparc.deb

Debian Linux 5.0 mipsel

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_mipsel.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_mipsel.deb


• Debian libicu38_3.8.1-3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_mipsel.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu icu-doc_3.8-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .1_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.1_lpia .deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.1_lp ia.deb


• Ubuntu libicu38_3.8-6ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.1_lpia.d eb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu icu-doc_3.4.1a-1ubuntu1.6.06.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.4.1a-1ubun tu1.6.06.2_all.deb


• Ubuntu libicu34-dev_3.4.1a-1ubuntu1.6.06.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34-dev_3.4.1a- 1ubuntu1.6.06.2_i386.deb


• Ubuntu libicu34_3.4.1a-1ubuntu1.6.06.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34_3.4.1a-1ubu ntu1.6.06.2_i386.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu icu-doc_3.6-3ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.6-3ubuntu0 .2_all.deb


• Ubuntu libicu36-dev_3.6-3ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu36-dev_3.6-3ubuntu0.2_lp ia.deb


• Ubuntu libicu36_3.6-3ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu36_3.6-3ubuntu0.2_lpia.d eb

Apple Mac OS X Server 10.5

• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu icu-doc_3.8.1-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.1_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.1_lp ia.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.1_ lpia.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.1_lpia .deb

Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu icu-doc_3.6-3ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.6-3ubuntu0 .2_all.deb


• Ubuntu libicu36-dev_3.6-3ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36-dev_3.6-3ub untu0.2_i386.deb


• Ubuntu libicu36_3.6-3ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36_3.6-3ubuntu 0.2_i386.deb

Debian Linux 4.0 amd64

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_amd64.deb


• Debian libicu36_3.6-2etch2_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu icu-doc_3.4.1a-1ubuntu1.6.06.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.4.1a-1ubun tu1.6.06.2_all.deb


• Ubuntu libicu34-dev_3.4.1a-1ubuntu1.6.06.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34-dev_3.4.1a- 1ubuntu1.6.06.2_amd64.deb


• Ubuntu libicu34_3.4.1a-1ubuntu1.6.06.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu34_3.4.1a-1ubu ntu1.6.06.2_amd64.deb

Debian Linux 4.0 ia-32

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_i386.deb


• Debian libicu36_3.6-2etch2_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _i386.deb

Debian Linux 5.0 hppa

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_hppa.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_hppa.deb


• Debian libicu38_3.8.1-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_hppa.deb

Debian Linux 4.0 hppa

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb

Debian Linux 4.0 sparc

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_sparc.deb


• Debian libicu36_3.6-2etch2_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _sparc.deb

Debian Linux 4.0 s/390

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_s390.deb


• Debian libicu36_3.6-2etch2_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _s390.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu icu-doc_3.8.1-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.1_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.1_sp arc.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.1_ sparc.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.1_spar c.deb

Debian Linux 5.0 m68k

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb

Debian Linux 5.0 arm

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_arm.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_arm.deb


• Debian libicu38_3.8.1-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_arm.deb

Debian Linux 4.0 alpha

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_alpha.deb


• Debian libicu36_3.6-2etch2_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _alpha.deb

Debian Linux 4.0 armel

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb

Debian Linux 5.0 armel

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_armel.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_armel.deb


• Debian libicu38_3.8.1-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_armel.deb

Debian Linux 5.0

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu icu-doc_3.6-3ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.6-3ubuntu0 .2_all.deb


• Ubuntu libicu36-dev_3.6-3ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36-dev_3.6-3ub untu0.2_amd64.deb


• Ubuntu libicu36_3.6-3ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu36_3.6-3ubuntu 0.2_amd64.deb

Debian Linux 4.0

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu icu-doc_3.8-6ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .1_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8-6ubun tu0.1_i386.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8-6ub untu0.1_i386.deb


• Ubuntu libicu38_3.8-6ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8-6ubuntu 0.1_i386.deb

Debian Linux 4.0 mipsel

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_mipsel.deb


• Debian libicu36_3.6-2etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _mipsel.deb

Debian Linux 5.0 amd64

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian lib32icu-dev_3.8.1-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/lib32icu-dev_3.8.1- 3+lenny1_amd64.deb


• Debian lib32icu38_3.8.1-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/lib32icu38_3.8.1-3+ lenny1_amd64.deb


• Debian libicu-dev_3.8.1-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_amd64.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_amd64.deb


• Debian libicu38_3.8.1-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_amd64.deb

Apple Mac OS X 10.5

• Apple Security Update 2008-003 (Intel)
  http://www.apple.com/support/downloads/securityupdate2008003intel.html


• Apple Security Update 2008-003 (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003ppc.html

Debian Linux 5.0 mips

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_mips.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_mips.deb


• Debian libicu38_3.8.1-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_mips.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu icu-doc_3.8.1-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.1_all.deb


• Ubuntu lib32icu-dev_3.8.1-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu-dev_3.8.1-2 ubuntu0.1_amd64.deb


• Ubuntu lib32icu38_3.8.1-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu38_3.8.1-2ub untu0.1_amd64.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-2ub untu0.1_amd64.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-2 ubuntu0.1_amd64.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-2ubun tu0.1_amd64.deb

Debian Linux 5.0 powerpc

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_powerpc.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_powerpc.deb


• Debian libicu38_3.8.1-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_ia64.deb


• Debian libicu36_3.6-2etch2_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _ia64.deb

Debian Linux 4.0 mips

• Debian icu-doc_3.6-2etch2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch2_ all.deb


• Debian libicu36-dev_3.6-2etch2_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch2_mips.deb


• Debian libicu36_3.6-2etch2_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch2 _mips.deb

Debian Linux 5.0 sparc

• Debian icu-doc_3.8.1-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny1_all.deb


• Debian libicu-dev_3.8.1-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny1_sparc.deb


• Debian libicu38-dbg_3.8.1-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny1_sparc.deb


• Debian libicu38_3.8.1-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny1_sparc.deb

Apple Mac OS X 10.4.11

• Apple Security Update 2008-003 (Intel)
  http://www.apple.com/support/downloads/securityupdate2008003intel.html


• Apple Security Update 2008-003 (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003ppc.html

Apple Mac OS X Server 10.4.11

• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

Apple Mac OS X 10.5.1

• Apple Security Update 2008-003 (Intel)
  http://www.apple.com/support/downloads/securityupdate2008003intel.html


• Apple Security Update 2008-003 (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003ppc.html

Apple Mac OS X Server 10.5.1

• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

Apple Mac OS X 10.5.2

• Apple Security Update 2008-003 (Intel)
  http://www.apple.com/support/downloads/securityupdate2008003intel.html


• Apple Security Update 2008-003 (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003ppc.html

Apple Mac OS X Server 10.5.2

• Apple Security Update 2008-003 Server (PPC)
  http://www.apple.com/support/downloads/securityupdate2008003serverppc. html


• Apple Security Update 2008-003 Server (Universal)
  http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html

International Components for Unicode Invalid ISO Character Handling Vulnerability

References:

• #6175 (Security issue with empty segments in toUnicode converters for ISO-2022-J (pedberg)
  
• #6198 (Port to ICU4J: Security fix for ISO-2022-x & HZ toUnicode converters) - I (pedberg)
  
• ICU 4.0 Release (ICU Project)
  
• ICU Project Home Page (ICU Project)
  
• Mac OS X Homepage (Apple)