Software Update: SteamOS 2,148 / 2,149 beta

SteamOS was designed by Valve as an operating system focused on playing games, of course in conjunction with the steam store. It can also play games stream from another Linux, macOS, or Windows system on the network. Valve released two updates to SteamOS earlier this year, the first in the brewmaster branch with 2,148 as the version number, and the second in the brewmaster beta branch with 2,149 as the version number. The corresponding announcements look like this:

SteamOS update 2.149 pushed to brewmaster beta

This is a mainly security fixes and catches SteamOS up with Debian 8.10.

==== SteamOS build 149 ====

• cpufrequtils – new package
• cups – Debian 8.10
• db – CVE-2017-10140
• db5.3 – CVE-2017-10140
• icu – CVE-2017-14952
• krb5 – CVE-2017-11368 CVE-2016-3120 CVE-2016-3119 CVE-2015-2694
• libio-socket-ssl-perl – Debian 8.10
• libx11 – CVE-2016-7942 CVE-2016-7943
• libx cursor – CVE-2017-16612
• libxfixes – CVE-2016-7944
• libxi – CVE-2016-7945 CVE-2016-7946
• libxrandr – CVE-2016-7947 ​​CVE-2016-7948
• libxtst – CVE-2016-7951 CVE-2016-7952
• libxv – CVE-2016-5407
• libxvmc – CVE-2016-7953
• nss – CVE-2017-7805
• openssh – Debian 8.10
• rsync – CVE-2017-16548 CVE-2017-17433 CVE-2017-17434
• sensible-utils – CVE-2017-17512
• sudo – CVE-2017-1000368
• syslinux – Debian 8.10
• vulkan – Fixes Vulkan on NVIDIA when AMDGPU-PRO ICD is installed.

SteamOS update 2.148 released to brewmaster

This is a big SteamOS update. This includes a new 4.14 Linux kernel, NVidia 387.22 graphics driver, and Mesa 17.2.4 for AMD and Intel. This is the same content that was released to beta last week with the addition of some small packaging fixes to address upgrade scenarios and debian installer issues.

==== SteamOS build 148 ====

• nvidia-graphics-drivers – drop libgles1 dependency
• nvidia-graphics-drivers – add transitional package for libgles1-glvnd-nvidia
• steamos-autoupdate – remove old alchemist configure script

==== SteamOS build 141 ====

• nvidia-graphics-drivers – update to 387.22
• mesa – update to 17.2.4
• steamos packages – video driver updates
• libglvnd – update to support new graphics drivers
• xorg-server – update to support GLVND
• glx-alternatives – update to support new graphics drivers
• firmware-nonfree – update to kernel 4.14.3
• curl – CVE-2017-8816 CVE-2017-8817
• firmware-free – update to Linux 4.14.3
• jquery – update jquery for kernel build
• libdrm – update to support new graphics drivers
• lightdm – Process /etc/environment when auto-logging into lightdm
• linux – update to Linux 4.14.3
• linux-latest – update to Linux 4.14.3
• samba – CVE-2017-15275 CVE-2017-14746
• broadcom-sta – fix compile for linux 4.14 kernel
• llvm-toolchain-5.0 – added to support new mesa

==== SteamOS build 135 ====

• bind9 – CVE-2017-3142 CVE-2017-3143
• curl – CVE-2017-1000257 CVE-2017-1000100 CVE-2017-1000101 CVE-2017-1000254
• debconf – Debian 8.9
• git – CVE-2017-1000117
• gnupg – CVE-2017-7526
• gnutls28 – Debian 8.9
• gtk+2.0 – Debian 8.9
• libav – CVE-2015-8365 CVE-2017-7208 CVE-2017-7862 CVE-2017-9992
• libdvdnav – Debian 8.9
• libgd2 – CVE-2017-6362
• libsoup2.4 – CVE-2017-2885
• libxfont – CVE-2017-13720 CVE-2017-13722
• libxml2 – CVE-2017-7805
• mysql-5.5 – CVE-2017-10268 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384 CVE-2017-3635 CVE-2017-3636 CVE-2017-3641 CVE-2017-3648 CVE-2017-3651 CVE -2017-3652 CVE-2017-3653
• netcfg – Debian 8.9
• nss – CVE-2017-7805
• os-prober – Debian 8.9
• perl – CVE-2017-12837 CVE-2017-12883
• samba – CVE-2017-12150 CVE-2017-12151 CVE-2017-12163
• steamos-base-files – udev rules from Feral to enable steering wheel support
• tzdata – latest upstream
• wget – CVE-2017-13089 CVE-2017-13090
• wpa – CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088
• cryptsetup – remove duplicate links in /usr/sbin
• kbd – remove duplicate links in /usr/bin
• libpng – fix /lib /usr/lib duplicate files
• less – fix files with the same name installed in / and /usr
• libusb – newer version to fix spurious library link
• nano – fix files with the same name installed in / and /usr
• acl – update acl to support merged /usr systems
• coreutils – No longer include /usr/sbin/touch symlink, create in postinst if necessary
• debian-installer – update kernel ABI
• debianutils – fix /lib /usr/lib duplicate files