A Debian Security Advisory (DSA-5979-2) has been issued to correct a regression introduced by an update for the libxslt package. The issue, which affects the deterministic generate-id implementation, was causing generated IDs to be in a non-deterministic order. For the Debian GNU/Linux 12 (Bookworm) and 13 (Trixie) distributions, the problem has been fixed in version 1.1.35-1+deb12u3 and 1.1.35-1.2+deb13u2 respectively.

[DSA 5979-2] libxslt regression update

[SECURITY] [DSA 5979-2] libxslt regression update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5979-1 security@debian.org
https://www.debian.org/security/ Guilhem Moulin
September 25, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libxslt
Debian Bug : 1114928

The update for libxslt announced in DSA 5979-1 introduced a regression
while back porting the upstream deterministic generate-id implementation,
which makes the generated IDs may remain in a non-deterministic order.

For the oldstable distribution (bookworm), these problems have been fixed
in version 1.1.35-1+deb12u3.

For the stable distribution (trixie), these problems have been fixed in
version 1.1.35-1.2+deb13u2.

We recommend that you upgrade your libxslt packages.

For the detailed security status of libxslt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libxslt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/