[RFR] wml://publicity/announcements/pt/2026/20260314.wml

--65r4qasufbrnxhxo
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Boa noite, pessoal.

Segue a tradução da notícia de lançamento da versão pontual 13.4 para
revisão. Lembrando só que ela usa o template já consolidado da equipe.

Abraços,
Charles

--65r4qasufbrnxhxo
Content-Type: text/vnd.wap.wml; charset=utf-8
Content-Disposition: attachment; filename="20260314.wml"
Content-Transfer-Encoding: 8bit

<define-tag pagetitle>Atualização Debian 13: 13.4 lançado</define-tag>
<define-tag release_date>2026-03-14</define-tag>
#use wml::debian::news
# $Id:

<define-tag release>13</define-tag>
<define-tag codename>trixie</define-tag>
<define-tag revision>13.4</define-tag>

<define-tag dsa>
    <tr><td align="center"><a href="$(HOME)/security/%0/dsa-%1">DSA-%1</a></td>
        <td align="center"><:
    my @p = ();
    for my $p (split (/,\s*/, "%2")) {
	push (@p, sprintf ('<a href="https://packages.debian.org/src:%s">%s</a>', $p, $p));
    }
    print join (", ", @p);
:></td></tr>
</define-tag>

<define-tag correction>
    <tr><td><a href="https://packages.debian.org/src:%0">%0</a></td>              <td>%1</td></tr>
</define-tag>

<define-tag srcpkg><a href="https://packages.debian.org/src:%0">%0</a></define-tag>

<p>O projeto Debian está feliz em anunciar a quarta atualização de sua
versão estável (stable) do Debian <release> (codinome <q><codename></q>).
Esta versão pontual adiciona principalmente correções para problemas de
segurança, além de pequenos ajustes para problemas mais sérios. Avisos de
segurança já foram publicados em separado e são referenciados quando
necessário.</p>

<p>Por favor, note que a versão pontual não constitui uma nova versão do Debian
<release>, mas apenas atualiza alguns dos pacotes já incluídos. Não há
necessidade de jogar fora as antigas mídias da <q><codename></q>. Após a
instalação, os pacotes podem ser atualizados para as versões atuais usando um
espelho atualizado do Debian.</p>

<p>Aquelas pessoas que frequentemente instalam atualizações a partir de
security.debian.org não terão que atualizar muitos pacotes, e a maioria de tais
atualizações estão incluídas na versão pontual.</p>

<p>Novas imagens de instalação logo estarão disponíveis nos locais
habituais.</p>

<p>A atualização de uma instalação existente para esta revisão pode ser feita
apontando o sistema de gerenciamento de pacotes para um dos muitos espelhos
HTTP do Debian. Uma lista abrangente de espelhos está disponível em:</p>

<div class="center">
  <a href="$(HOME)/mirror/list">https://www.debian.org/mirror/list</a>
</div>


<h2>Correções gerais de bugs</h2>

<p>Esta atualização da versão estável (stable) adiciona algumas correções
importantes para os seguintes pacotes:</p>

<table border=0>
<tr><th>Pacote</th>               <th>Justificativa</th></tr>
<correction akonadi "Show all folders in kmail">
<correction apache2 "Fix HTTP/2 regression">
<correction arduino-core-avr "New upstream stable release; fix buffer overflow issue [CVE-2025-69209]">
<correction asahi-scripts "Fix SD card reader autosuspend">
<correction augeas "Fix null pointer dereference issue [CVE-2025-2588]">
<correction base-files "Update for the point release">
<correction bash "Rebuild with updated glibc">
<correction bglibs "Rebuild with updated glibc">
<correction bird2 "Use Restart=on-abnormal instead of on-abort; RAdv: Fix flags for deprecated prefixes; BMP: Fix crash when exporting a route with non-bgp attributes; ASPA check fix for AS_SET">
<correction brltty "Fix taking the VT number from the chosen session">
<correction busybox "Rebuild with updated glibc">
<correction capstone "New upstream stable release; fix buffer overflow issue [CVE-2025-67873]; fix buffer underflow and overflow issue [CVE-2025-68114]">
<correction catatonit "Rebuild with updated glibc">
<correction cdebootstrap "Rebuild with updated glibc">
<correction chkrootkit "Rebuild with updated glibc">
<correction chrony "Open refclock writeable to maintain compatibility with newer kernels">
<correction civetweb "Fix denial of service issue [CVE-2025-9648]; fix buffer overflow issue [CVE-2025-55763]">
<correction ckb-next "Fix init script installation and initialisation; ensure cryptographic verification of firmware updates">
<correction clatd "Fix systemd unit installation; correct NetworkManager dispatcher install path; provide example configuration; ensure obsolete dispatcher script is removed on upgrade">
<correction condor "Rebuild with updated glibc">
<correction dar "Rebuild with updated glibc and openssl">
<correction debian-installer "Increase Linux kernel ABI to 6.12.73+deb13; rebuild against proposed updates">
<correction debian-installer-netboot-images "Rebuild against proposed-updates">
<correction debian-ports-archive-keyring "Add <q>Debian Ports Archive Automatic Signing Key (2027)</q>; move 2025 signing key to the removed keys keyring">
<correction debsig-verify "Rebuild with updated dpkg">
<correction debvm "Only use the console in nographics mode; use correct variable name; autologin: prefer credentials to monkey patching unit; customize-resolved.sh: explicitly install systemd-resolved">
<correction deets "Rebuild with updated dpkg">
<correction direwolf "Fix stack buffer overflow [CVE-2025-34457]">
<correction distribution-gpg-keys "Update included keys">
<correction distrobuilder "Rebuild with updated incus">
<correction docker.io "Rebuild with updated glibc">
<correction dovecot "Fix possible crash in ldap userdb; fix crash in trash plugin; fix segfault when group ACLs are present but the user has no groups">
<correction dpkg "dpkg-query: Fix segfault with empty -S argument; Dpkg::OpenPGP: Do not run verify with no keyrings; Dpkg::Shlibs::Objdump::Object: Add support for <q>Version References</q> symbols; Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import; fix denial of service issue [CVE-2026-2219]">
<correction e2fsprogs "Rebuild with updated glibc">
<correction ejabberd "Remove old apparmor profile file">
<correction ejabberd-contrib "Rebuild with updated ejabberd">
<correction erlang "Fix excessive resource use issues [CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-48041]; fix traffic redirection issue [CVE-2016-1000107]">
<correction ffmpegfs "Fix incomplete listing of files in output directory">
<correction flatpak "New upstream stable release">
<correction fluidsynth "Fix null pointer dereference issue [CVE-2025-56225]">
<correction fonttools "Fix arbitrary file write issue [CVE-2025-66034]">
<correction glibc "Update from upstream stable branch; fix heap corruption issue [CVE-2026-0861]; fix stack contents leak issue [CVE-2026-0915]; fix uninitialized memory use issue [CVE-2025-15281]; switch currency symbol for the bg_BG locale to euro; fix a null pointer dereference in symbol lookup when the symbol version hash is zero; fix various optimized functions">
<correction gnome-shell "Revert inadvertently backported change that can cause the Shell UI to not appear on some systems">
<correction gnu-efi "Fix build of UEFI binaries for armhf">
<correction gnuais "Fix displaying the map in gnuaisgui">
<correction gnupg2 "Rebuild with updated glibc">
<correction gpsd "Fix out-of-bounds write issue [CVE-2025-67268]; fix denial of service issue [CVE-2025-67269]">
<correction grub-efi-amd64-signed "Fix ZFS root identification">
<correction grub-efi-arm64-signed "Fix ZFS root identification">
<correction grub-efi-ia32-signed "Fix ZFS root identification">
<correction grub2 "Fix ZFS root identification">
<correction ifupdown "Fix IPv6 DAD handling in ifup; correct dhclient invocation ordering for IPv6; restore correct executable path detection in ifup scripts">
<correction integrit "Rebuild with updated glibc">
<correction jaraco.context "Prevent path traversal [CVE-2026-23949]">
<correction libcap2 "Rebuild with updated glibc">
<correction libguestfs "Add dependency on isc-dhcp-client">
<correction libpng1.6 "Fix heap buffer overflow issues [CVE-2026-22801 CVE-2026-22695]">
<correction libsndfile "Fix memory leak issue [CVE-2025-56226]">
<correction linux-base "Use compatible hook dir names for headers packages">
<correction lxc "Fix data corruption during heavy IO on PTS; update lxc-default-with-nesting apparmor profile; rebuild with updated glibc">
<correction mariadb "New upstream stable release; fix arbitrary code execution issue [CVE-2025-13699]; fix denial of service issue [CVE-CVE-2026-21968]; use tmpfiles.d to generate runtime directory; fix upgrades from version 10.4 when encryption is enabled; fix innodb_linux_aio support">
<correction mpg123 "Do not modify raw ID3v2 data while parsing">
<correction node-proxy-agents "Fix path traversal issue [CVE-2026-27699]">
<correction open-iscsi "Fix discovery of <q>static</q> nodes">
<correction openssh "Fix mistracking of MaxStartups process exits in some situations; fix possible code execution issues [CVE-2025-61984 CVE-2025-61985]">
<correction openssl "New upstream stable release">
<correction passt "Increase AppArmor ABI version to 4.0 to enable user namespace creation">
<correction pcsx2 "Fix code execution issue [CVE-2025-49589]">
<correction pdudaemon "Add missing dependency on setuputils">
<correction phpunit "Fix unsafe deserialization issue [CVE-2026-24765]">
<correction plastimatch "Repack to exclude non-free source files">
<correction policyd-rate-limit "Fix operation with Python &gt;= 3.12">
<correction postgresql-17 "New upstream stable release; fix buffer overrun issue [CVE-2026-2006]">
<correction python-cryptography "Fix missing validation in EC public key creation [CVE-2026-26007]">
<correction python-filelock "Fix TOCTOU symlink handling vulnerability in lock file creation [CVE-2025-68146]">
<correction python-multipart "Fix arbitrary file write issue [CVE-2026-24486]">
<correction python-os-ken "Accept empty <q>OXM</q> fields">
<correction python-pyspnego "Fix deprecation warnings">
<correction qemu "New upstream stable release; fix denial of service issues [CVE-2025-14876 CVE-2026-0665]">
<correction qtbase-opensource-src "Fix data races; X11: set fallback logical DPI to 96, fixing incorrect calculation">
<correction reprepro "Fix incorrect tracking data when copying packages">
<correction requests "Fix credential leak issue [CVE-2024-47081]">
<correction riseup-vpn "Support additional polkit providers">
<correction runit-services "Slim: start in foreground with -n; dbus-dep.fixer: correctly test for existing services definitions, only start dbus services, even with the sysv override">
<correction rust-ntp-proto "Fix excessive load issue [CVE-2026-26076]">
<correction rust-ntpd "Rebuild with rust-ntp-proto 1.4.0-4+deb13u1 to fix CVE-2026-26076">
<correction rust-tealdeer "Update archive URL">
<correction samba "New upstream stable release">
<correction sash "Rebuild with updated glibc">
<correction scilab "Fix build failure">
<correction snapd "Rebuild with updated glibc">
<correction sqlite3 "Prevent integer overflow in FTSS extension [CVE-2025-7709]; add missing build dependency on pkgconf">
<correction starlette "Fix denial of service issue [CVE-2025-62727]">
<correction sudo "Only enable Intel CET on amd64; fix regression with sudoers.d filenames containing colons">
<correction suricata "Fix denial of service issues [CVE-2026-22258 CVE-2026-22259 CVE-2026-22261]; fix stack overflow issue [CVE-2026-22262]; fix heap overflow issue [CVE-2026-22264]">
<correction tayga "Fix EAM mapping for host addresses">
<correction tini "Rebuild with updated glibc">
<correction torsocks "Use correct environment variable; explicitly trigger ldconfig trigger">
<correction tripwire "Rebuild with updated glibc">
<correction tsocks "Rebuild with updated glibc">
<correction tzdata "New upstream release; Moldova has used EU transition times since 2022">
<correction uglifyjs "Fix test failure">
<correction units "Update URLs to packetizer.com">
<correction user-mode-linux "Rebuild with updated linux">
<correction wget2 "Fix file overwrite issue with metalink [CVE-2025-69194]; fix remote buffer overflow [CVE-2025-69195]">
<correction wireless-regdb "New upstream stable release; update regulatory information for several countries">
<correction wireshark "New upstream stable release; fix USB HID dissector memory exhaustion [CVE-2026-3201]; fix RF4CE Profile dissector crash [CVE-2026-3203]">
<correction xen "New upstream stable release; fix buffer overrun issue [CVE-2025-58150]; fix incomplete vCPU isolation issue [CVE-2026-23553]">
<correction zabbix "New upstream stable release; fix data leakage issues [CVE-2025-27231 CVE-2025-27233 CVE-2025-27236 CVE-2025-27238 CVE-2025-49641]; fix denial of service issue [CVE-2025-49643]">
<correction zookeeper "Fix build failure by skipping some flaky tests">
<correction zsh "Rebuild with updated glibc">
</table>


<h2>Atualizações de segurança</h2>

<p>Esta revisão adiciona as seguintes atualizações de segurança para a versão
estável (stable).
A equipe de segurança já lançou um aviso para cada uma dessas atualizações:</p>

<table border=0>
<tr><th>ID do aviso</th>  <th>Pacote</th></tr>
<dsa 2025 6054 firefox-esr>
<dsa 2025 6078 firefox-esr>
<dsa 2026 6093 gimp>
<dsa 2026 6094 libsodium>
<dsa 2026 6095 foomuuri>
<dsa 2026 6096 vlc>
<dsa 2026 6097 chromium>
<dsa 2026 6098 net-snmp>
<dsa 2026 6099 python-parsl>
<dsa 2026 6100 chromium>
<dsa 2026 6101 firefox-esr>
<dsa 2026 6102 python-urllib3>
<dsa 2026 6103 thunderbird>
<dsa 2026 6104 python-keystonemiddleware>
<dsa 2026 6105 modsecurity-crs>
<dsa 2026 6106 inetutils>
<dsa 2026 6107 bind9>
<dsa 2026 6108 chromium>
<dsa 2026 6109 incus>
<dsa 2026 6111 imagemagick>
<dsa 2026 6112 openjdk-21>
<dsa 2026 6113 openssl>
<dsa 2026 6114 pyasn1>
<dsa 2026 6115 gimp>
<dsa 2026 6116 chromium>
<dsa 2026 6117 python-django>
<dsa 2026 6118 thunderbird>
<dsa 2026 6119 jtreg8>
<dsa 2026 6119 openjdk-25>
<dsa 2026 6120 tomcat10>
<dsa 2026 6121 tomcat11>
<dsa 2026 6122 chromium>
<dsa 2026 6123 xrdp>
<dsa 2026 6124 wireshark>
<dsa 2026 6125 usbmuxd>
<dsa 2026 6126 linux-signed-amd64>
<dsa 2026 6126 linux-signed-arm64>
<dsa 2026 6126 linux>
<dsa 2026 6128 shaarli>
<dsa 2026 6129 munge>
<dsa 2026 6130 haproxy>
<dsa 2026 6131 nginx>
<dsa 2026 6133 postgresql-17>
<dsa 2026 6134 pdns-recursor>
<dsa 2026 6135 chromium>
<dsa 2026 6137 roundcube>
<dsa 2026 6138 libpng1.6>
<dsa 2026 6139 gimp>
<dsa 2026 6140 gnutls28>
<dsa 2026 6141 linux-signed-amd64>
<dsa 2026 6141 linux-signed-arm64>
<dsa 2026 6141 linux>
<dsa 2026 6142 gegl>
<dsa 2026 6143 libvpx>
<dsa 2026 6144 inetutils>
<dsa 2026 6145 nova>
<dsa 2026 6146 chromium>
<dsa 2026 6147 pillow>
<dsa 2026 6148 firefox-esr>
<dsa 2026 6149 nss>
<dsa 2026 6150 python-django>
<dsa 2026 6151 chromium>
<dsa 2026 6152 thunderbird>
<dsa 2026 6153 lxd>
<dsa 2026 6155 spip>
<dsa 2026 6156 gimp>
<dsa 2026 6157 chromium>
</table>


<h2>Instalador do Debian</h2>

<p>O instalador foi atualizado para incluir as correções incorporadas
na versão estável (stable) pela versão pontual.</p>


<h2>URLs</h2>

<p>As listas completas dos pacotes que foram alterados por esta revisão:</p>

<div class="center">
  <url "https://deb.debian.org/debian/dists/<downcase <codename>>/ChangeLog">
</div>

<p>A atual versão estável (stable):</p>

<div class="center">
  <url "https://deb.debian.org/debian/dists/stable/">
</div>

<p>Atualizações propostas (proposed updates) para a versão estável (stable):</p>

<div class="center">
  <url "https://deb.debian.org/debian/dists/proposed-updates">
</div>

<p>Informações da versão estável (stable) (notas de lançamento, errata, etc):</p>

<div class="center">
  <a
  href="$(HOME)/releases/stable/">https://www.debian.org/releases/stable/</a>
</div>

<p>Anúncios de segurança e informações:</p>

<div class="center">
  <a href="$(HOME)/security/">https://www.debian.org/security/</a>
</div>


<h2>Sobre o Debian</h2>

<p>O projeto Debian é uma associação de desenvolvedores(as) de Software Livre
que dedicam seu tempo e esforço como voluntários(as) para produzir o sistema
operacional completamente livre Debian.</p>


<h2>Informações de contato</h2>

<p>Para mais informações, por favor visite as páginas web do Debian em
<a href="$(HOME)/">https://www.debian.org/</a>, envie um e-mail (em inglês) para
&lt;[email protected]&gt;, ou entre em contato (em inglês) com a equipe de
lançamento da versão estável (stable) em
&lt;[email protected]&gt;.</p>

--65r4qasufbrnxhxo--