I've written some really short answers in bold. Write back if you've got more questions. I have a few questions that I couldn't seem to find the answers to by studying the regs, and I was hoping that you could clear things up for me. Here's the list. This site is located in the U.S. and for those specific files there are no restrictions for retrieval, now that the new regs have gone into effect.
Pointer is sufficient.
This is sort of a judgement call. If your updates don't change the cryptographic functinality, algorithm, etc, you don't need to come back in. I expect that the overseas group may want to mirror it, and incorporate it into their ongoing work, which is also posted. You need to come in for a review, noting that the code was compiled or developed from an open source. Your answers would go a long ways toward helping us understand how the new regulations work.