[IT-SecNots] [SECURITY] [DSA 5979-2] libxslt regression update

[Aron Xu <aron AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5979-1                   security AT debian.org
https://www.debian.org/security/                           Guilhem Moulin
September 25, 2025                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libxslt
Debian Bug     : 1114928

The update for libxslt announced in DSA 5979-1 introduced a regression
while back porting the upstream deterministic generate-id implementation,
which makes the generated IDs may remain in a non-deterministic order.

For the oldstable distribution (bookworm), these problems have been fixed
in version 1.1.35-1+deb12u3.

For the stable distribution (trixie), these problems have been fixed in
version 1.1.35-1.2+deb13u2.

We recommend that you upgrade your libxslt packages.

For the detailed security status of libxslt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libxslt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmjUTJ8ACgkQNP8o68vM
TMgJ3wf+J+gd+Xi7TB96zbvZVebqOkOoy2JnsCnZnN4iB3z1l3gB0a+M0+HN2T9x
dqHATHOicE5F9Qv6ATR03opYsPLKxBcDeJ7EA/SjL2Bj7MK0h9RUkD+2MMZXZFoB
2KQxA25GADWFTRBihnQc6hvA3linQGRSgsEr2gOlWB6dXLP88+OXt8+YIjlceJIl
T0oGP8PhMoLHtk250lEzcX3v2++qPfAV19SUBbrqtL3usaqHVNs8Sx39v+BnDmzy
RzR5u2gtIWlxL0sI+cwwgvb60HSo+wWvYY0jJY+g4+Yc08x8nIc3vim3qCFKwYzY
5zQanRrtwr2Yf6h2NTbWEI4trszURg==
=lYji
-----END PGP SIGNATURE-----