libidn-1.43

[Douglas R. Reno]

New minor version

[Bruce Dubbs]

Noteworthy changes in release 1.43 (2025-03-21) [stable]

• The release tarball is now reproducible.

Builds on the following pairs of systems are tested continuously in GitLab CI/CD to assert that the tarball is identical: Trisquel 11 against Ubuntu 22.04, PureOS 10 against Debian 11, Devuan 5 against Debian 12, AlmaLinux 8 against RockyLinux 8, and AlmaLinux 9 against RockyLinux 9. There are still minor variations between non-similar platforms, depending on the different versions of the bootstrapping tools used. For example, a tarball generated on a Trisquel 11 (derived from Ubuntu 22.04) system should be identical to a tarball from a Ubuntu 22.04 system, but will not be identical to a tarball generated on a PureOS 10 system which uses different bootstrapping tool versions. The release archive itself was prepared using Guix.

• We publish a minimal source-only tarball generated by 'git archive'.

This tarball only contains the files stored in version controlled sources, and no auxiliary files. The source-only tarball may be reproduced with Git 2.48.1 from Guix. If something results in the 'git archive' format changing again, the tarball can only be reproduced using an earlier system. The git version in AlmaLinux 8, AlmaLinux 9, RockyLinux 8, RockyLinux 9, Devuan 5, Debian 12 and Ubuntu 24.04 all produce the same identical 'git archive' tarball. The git version used on Debian 11, PureOS 10, Trisquel 11 and Ubuntu 22.04 produce another identical tarball. These two 'git archive' outputs are not the same, due to how Git works.

• A use of uninitialized value bug was fixed in idna_to_unicode_4z4z.

If the call to idna_to_unicode_44i failed due to an out of memory condition (malloc() returning NULL) then the code would copy the content of allocated but uninitialized memory into the output buffer. The bug was found using GCC's static analyzer.

• The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI.

• Fix self-check tst-version due to broken strverscmp on Windows/musl.

• The release tarball uses tar --format=ustar.

• The idn tool now binds the "gnulib" domain for translations.

• Unicode tables are now rebuilt from source again.

The lib/gen-unicode-tables.pl script stopped working with Perl 5.10 and in 2008 we added the then-generated source code files to git. Now we fixed the script to work with modern perl, so that gunibreak.h gunicomp.h gunidecomp.h can now be generated from source again.

• Update gnulib files and build fixes.

[Bruce Dubbs]

Fixed at commits

aa5ce0ed6a Update to libusb-1.0.28.
1b43bce9c1 Update to libarchive-3.7.8 (Security update).
384d2050f6 Update to libidn-1.43.
48773d0cd9 Update to libsoup-3.6.5.