International Components for Unicode Invalid Byte Sequence Handling Vulnerability

Bugtraq ID:	34974
Class:	Design Error
CVE:	CVE-2009-0153
Remote:	Yes
Local:	No
Published:	May 12 2009 12:00AM
Updated:	Apr 13 2015 09:50PM
Credit:	Chris Weber of Casaba Security
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Aura Session Manager 1.1 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 1.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1
Not Vulnerable:	Apple Mac OS X Server 10.5.7 Apple Mac OS X 10.5.7 Apple iPod Touch 3.0 Apple iPhone 3.0

International Components for Unicode Invalid Byte Sequence Handling Vulnerability

The International Components for Unicode is prone to an input-validation vulnerability because the library may incorrectly convert some invalid byte sequences.

An attacker may leverage this vulnerability to bypass content filters. This may lead to cross-site scripting attacks or allow the attacker to obtain sensitive information in some cases. Other attacks are also possible.

NOTE: This issue was previously covered in BID 34926 (Apple Mac OS X 2009-002 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

International Components for Unicode Invalid Byte Sequence Handling Vulnerability

An attacker may exploit this issue using readily available tools. For some attacks, the attacker must entice an unsuspecting user to follow a malicious URI.

International Components for Unicode Invalid Byte Sequence Handling Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_ia64.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_ia64.deb


• Debian libicu38_3.8.1-3+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu icu-doc_3.8-6ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .2_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.2_powe rpc.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.2_po werpc.deb


• Ubuntu libicu38_3.8-6ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.2_powerp c.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu icu-doc_3.8.1-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.2_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.2_po werpc.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.2_ powerpc.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.2_powe rpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu icu-doc_3.8-6ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .2_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.2_spar c.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.2_sp arc.deb


• Ubuntu libicu38_3.8-6ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.2_sparc. deb

Debian Linux 5.0 alpha

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_alpha.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_alpha.deb


• Debian libicu38_3.8.1-3+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_alpha.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu icu-doc_3.8-6ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .2_all.deb


• Ubuntu lib32icu-dev_3.8-6ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu-dev_3.8-6ub untu0.2_amd64.deb


• Ubuntu lib32icu38_3.8-6ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu38_3.8-6ubun tu0.2_amd64.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8-6ubun tu0.2_amd64.deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8-6ub untu0.2_amd64.deb


• Ubuntu libicu38_3.8-6ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8-6ubuntu 0.2_amd64.deb

Debian Linux 5.0 mipsel

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_mipsel.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_mipsel.deb


• Debian libicu38_3.8.1-3+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_mipsel.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu icu-doc_3.8.1-3ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-3ubunt u1.1_all.deb


• Ubuntu libicu-dev_3.8.1-3ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-3ubuntu1.1_sp arc.deb


• Ubuntu libicu38-dbg_3.8.1-3ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-3ubuntu1.1_ sparc.deb


• Ubuntu libicu38_3.8.1-3ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-3ubuntu1.1_spar c.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu icu-doc_3.8.1-3ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-3ubunt u1.1_all.deb


• Ubuntu libicu-dev_3.8.1-3ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-3ubuntu1.1_po werpc.deb


• Ubuntu libicu38-dbg_3.8.1-3ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-3ubuntu1.1_ powerpc.deb


• Ubuntu libicu38_3.8.1-3ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-3ubuntu1.1_powe rpc.deb

Apple Mac OS X Server 10.5

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Debian Linux 4.0 amd64

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_amd64.deb


• Debian libicu36_3.6-2etch3_amd64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _amd64.deb

Debian Linux 4.0 ia-32

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_i386.deb


• Debian libicu36_3.6-2etch3_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _i386.deb

Debian Linux 4.0 hppa

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_hppa.deb


• Debian libicu36_3.6-2etch3_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _hppa.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu icu-doc_3.8.1-3ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-3ubunt u1.1_all.deb


• Ubuntu libicu-dev_3.8.1-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-3ub untu1.1_i386.deb


• Ubuntu libicu38-dbg_3.8.1-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-3 ubuntu1.1_i386.deb


• Ubuntu libicu38_3.8.1-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-3ubun tu1.1_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu icu-doc_3.8.1-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.2_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.2_sp arc.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.2_ sparc.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.2_spar c.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu icu-doc_3.8.1-3ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-3ubunt u1.1_all.deb


• Ubuntu libicu-dev_3.8.1-3ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-3ubuntu1.1_lp ia.deb


• Ubuntu libicu38-dbg_3.8.1-3ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-3ubuntu1.1_ lpia.deb


• Ubuntu libicu38_3.8.1-3ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-3ubuntu1.1_lpia .deb

Debian Linux 4.0 armel

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb

Debian Linux 5.0 armel

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_armel.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_armel.deb


• Debian libicu38_3.8.1-3+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_armel.deb

Debian Linux 5.0

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb

Debian Linux 4.0 mipsel

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_mipsel.deb


• Debian libicu36_3.6-2etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _mipsel.deb

Debian Linux 5.0 mips

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_mips.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_mips.deb


• Debian libicu38_3.8.1-3+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu icu-doc_3.8.1-3ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-3ubunt u1.1_all.deb


• Ubuntu lib32icu-dev_3.8.1-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu-dev_3.8.1-3 ubuntu1.1_amd64.deb


• Ubuntu lib32icu38_3.8.1-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu38_3.8.1-3ub untu1.1_amd64.deb


• Ubuntu libicu-dev_3.8.1-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-3ub untu1.1_amd64.deb


• Ubuntu libicu38-dbg_3.8.1-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-3 ubuntu1.1_amd64.deb


• Ubuntu libicu38_3.8.1-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-3ubun tu1.1_amd64.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu icu-doc_3.8.1-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.2_all.deb


• Ubuntu lib32icu-dev_3.8.1-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu-dev_3.8.1-2 ubuntu0.2_amd64.deb


• Ubuntu lib32icu38_3.8.1-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/lib32icu38_3.8.1-2ub untu0.2_amd64.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-2ub untu0.2_amd64.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-2 ubuntu0.2_amd64.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-2ubun tu0.2_amd64.deb

Debian Linux 4.0 ia-64

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_ia64.deb


• Debian libicu36_3.6-2etch3_ia64.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _ia64.deb

Debian Linux 4.0 mips

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_mips.deb


• Debian libicu36_3.6-2etch3_mips.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _mips.deb

Debian Linux 5.0 sparc

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_sparc.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_sparc.deb


• Debian libicu38_3.8.1-3+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_sparc.deb

Debian Linux 4.0 arm

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu icu-doc_3.8.1-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.2_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu-dev_3.8.1-2ub untu0.2_i386.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38-dbg_3.8.1-2 ubuntu0.2_i386.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/libicu38_3.8.1-2ubun tu0.2_i386.deb

Debian Linux 4.0 powerpc

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_powerpc.deb


• Debian libicu36_3.6-2etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _powerpc.deb

Debian Linux 4.0 m68k

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb

Debian Linux 5.0 ia-32

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_i386.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_i386.deb


• Debian libicu38_3.8.1-3+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_i386.deb

Debian Linux 5.0 s/390

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_s390.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_s390.deb


• Debian libicu38_3.8.1-3+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu icu-doc_3.8-6ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8-6ubuntu0 .2_all.deb


• Ubuntu libicu-dev_3.8-6ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8-6ubuntu0.2_lpia .deb


• Ubuntu libicu38-dbg_3.8-6ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8-6ubuntu0.2_lp ia.deb


• Ubuntu libicu38_3.8-6ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8-6ubuntu0.2_lpia.d eb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu icu-doc_3.8.1-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/icu/icu-doc_3.8.1-2ubunt u0.2_all.deb


• Ubuntu libicu-dev_3.8.1-2ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu-dev_3.8.1-2ubuntu0.2_lp ia.deb


• Ubuntu libicu38-dbg_3.8.1-2ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38-dbg_3.8.1-2ubuntu0.2_ lpia.deb


• Ubuntu libicu38_3.8.1-2ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/i/icu/libicu38_3.8.1-2ubuntu0.2_lpia .deb

Debian Linux 5.0 hppa

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_hppa.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_hppa.deb


• Debian libicu38_3.8.1-3+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_hppa.deb

Debian Linux 4.0 sparc

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_sparc.deb


• Debian libicu36_3.6-2etch3_sparc.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _sparc.deb

Debian Linux 4.0 s/390

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_s390.deb


• Debian libicu36_3.6-2etch3_s390.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _s390.deb

Debian Linux 5.0 m68k

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb

Debian Linux 5.0 arm

• Debian icu-doc_3.8.1-3+lenny2_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.8.1-3+len ny2_all.deb


• Debian libicu-dev_3.8.1-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu-dev_3.8.1-3+ lenny2_arm.deb


• Debian libicu38-dbg_3.8.1-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38-dbg_3.8.1- 3+lenny2_arm.deb


• Debian libicu38_3.8.1-3+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu38_3.8.1-3+le nny2_arm.deb

Debian Linux 4.0 alpha

• Debian icu-doc_3.6-2etch3_all.deb
  http://security.debian.org/pool/updates/main/i/icu/icu-doc_3.6-2etch3_ all.deb


• Debian libicu36-dev_3.6-2etch3_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36-dev_3.6-2e tch3_alpha.deb


• Debian libicu36_3.6-2etch3_alpha.deb
  http://security.debian.org/pool/updates/main/i/icu/libicu36_3.6-2etch3 _alpha.deb

Apple Mac OS X 10.5.1

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.1

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.2

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.2

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.3

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.3

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.4

• Apple MacOSXUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL827/MacOSXUpdCombo10.5.7.dmg

Apple Mac OS X Server 10.5.4

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X Server 10.5.5

• Apple MacOSXServerUpdCombo10.5.7.dmg
  http://support.apple.com/downloads/DL829/MacOSXServerUpdCombo10.5.7.dm g

Apple Mac OS X 10.5.6

• Apple MacOSXUpd10.5.7.dmg
  http://support.apple.com/downloads/DL826/MacOSXUpd10.5.7.dmg

Apple Mac OS X Server 10.5.6

• Apple MacOSXServerUpd10.5.7.dmg
  http://support.apple.com/downloads/DL828/MacOSXServerUpd10.5.7.dmg

International Components for Unicode Invalid Byte Sequence Handling Vulnerability

References:

• Mac OS X Homepage (Apple)
  
• ASA-2009-254 icu security update (RHSA-2009-1122) (Avaya)