SteamOS update 2.190 released

[TTimo]

*updated 2019/5/21: 2.190 has been released to general availability*

A SteamOS update is available in brewmaster_beta (version 2.190):

- security updates
- firmware-nonfree updates

For details on how to test SteamOS beta and to report issues, please see:

https://github.com/ValveSoftware/SteamOS/wiki/Opting-into-SteamOS-Beta
https://github.com/ValveSoftware/SteamOS/issues

==== SteamOS build 190 2019-05-09 ====

• apache2 - T14118 - CVE-2019-0217[cve.mitre.org], CVE-2019-0220[cve.mitre.org]
  
• asciiidoctor - Documentation processor (used by the kernel)
  
• checkstyle - T14419 - CVE-2019-9658[cve.mitre.org]
  
• evolution - T14420 - CVE-2018-15587[cve.mitre.org].
  
• gpac - T14421 - CVE-2019-11221[cve.mitre.org], CVE-2019-11222[cve.mitre.org].
  
• graphicsmagick - T14252 - CVE-2017-10799[cve.mitre.org], CVE-2019-11006[cve.mitre.org], CVE-2019-11007[cve.mitre.org], CVE-2019-11008[cve.mitre.org], CVE-2019-11009[cve.mitre.org], CVE-2019-11010[cve.mitre.org]
  
• gst-plugins-base0.10 - T14422 - CVE-2019-9928[cve.mitre.org].
  
• gst-plugins-base1.0 - T14423 - CVE-2019-9928[cve.mitre.org].
  
• jasper - T14253 - CVE-2018-19542[cve.mitre.org]
  
• libav - T14119 - CVE-2018-1999012[cve.mitre.org], CVE-2015-1872[cve.mitre.org], CVE-2018-6392[cve.mitre.org], CVE-2017-14058[cve.mitre.org], CVE-2017-1000460[cve.mitre.org]
  
• libdatetime-timezone-perl - T14120 - update for Olson database version 2019a.
  
• liblivemedia - T14038 - CVE-2019-9215[cve.mitre.org]
  
• libopencsd - Dependency for the kernel profiling/benchmarking userspace tools.
  
• libraw - T14121 - CVE-2018-5800[cve.mitre.org], CVE-2018-5801[cve.mitre.org], CVE-2018-5802[cve.mitre.org], CVE-2018-5808[cve.mitre.org], CVE-2018-5817[cve.mitre.org], CVE-2018-5818[cve.mitre.org], CVE-2018-5819[cve.mitre.org]
  
• libsndfile - T14039 - CVE-2019-3832[cve.mitre.org]
  
• libssh2 - T14122 - CVE-2019-3859[cve.mitre.org]
  
• libxslt - T14288 - CVE-2019-11068[cve.mitre.org].
  
• linux - <no message>
  
• ntfs-3g - T14041 - CVE-2019-9755[cve.mitre.org].
  
• opencv - T10926 - CVE-2018-5268[cve.mitre.org], CVE-2018-5269[cve.mitre.org], CVE-2017-1000450[cve.mitre.org], CVE-2017-17760[cve.mitre.org], CVE-2017-12597[cve.mitre.org], CVE-2017-12598[cve.mitre.org], CVE-2017-12599[cve.mitre.org], CVE-2017-12601[cve.mitre.org], CVE-2017-12603[cve.mitre.org], CVE-2017-12604[cve.mitre.org], CVE-2017-12605[cve.mitre.org], CVE-2017-12606[cve.mitre.org], CVE-2017-12862[cve.mitre.org], CVE-2017-12863[cve.mitre.org], CVE-2017-12864[cve.mitre.org], CVE-2017-14136[cve.mitre.org] and CVE-2016-1516[cve.mitre.org].
  
• openjdk-7 - T14043 - CVE-2019-2422[cve.mitre.org], CVE_2019-2426, CVE-2018-11212[cve.mitre.org]
  
• php5 - T14123 - CVE-2019-9637[cve.mitre.org], CVE-2019-9638[cve.mitre.org], CVE-2019-9639[cve.mitre.org], CVE-2019-9640[cve.mitre.org], CVE-2019-9641[cve.mitre.org], CVE-2019-9022[cve.mitre.org]
  
• poppler - T14254 - CVE-2019-9631[cve.mitre.org].
  
• rails - T14124 - CVE-2019-5418[cve.mitre.org], CVE-2019-5419[cve.mitre.org]
  
• rsync - T14045 - CVE-2016-9840[cve.mitre.org], CVE-2016-9841[cve.mitre.org], CVE-2016-9842[cve.mitre.org], CVE-2016-9843[cve.mitre.org], CVE-2018-5764[cve.mitre.org].
  
• ruby2.1 - T14125 - CVE-2019-8320[cve.mitre.org], CVE-2019-8322[cve.mitre.org], CVE-2019-8323[cve.mitre.org], CVE-2019-8324[cve.mitre.org], CVE-2019-8325[cve.mitre.org]
  
• samba - T14244 - CVE-2019-3880[cve.mitre.org], CVE-2018-1057[cve.mitre.org], CVE-2018-1050[cve.mitre.org] and CVE-2017-9461[cve.mitre.org].
  
• sqlalchemy - T14046 - CVE-2019-7164[cve.mitre.org], CVE-2019-7548[cve.mitre.org]
  
• tzdata - T14126 - update timezone data for Palestine and Metlakatla.
  
• wget - T14359 - CVE-2019-5953[cve.mitre.org].
  
• wpa - T14127 - CVE-2016-10743[cve.mitre.org]
  
• firmware-nonfree - 20190114-1

[gibblets]

Nice to see the security is being kept up to date, looking forward to see what the future holds.

[Mohandevir]

Thanks for the update! Keep doing you awesome work.

If I may ask... Is there something that could be done to make SteamOS usable with in-home streaming, as the host?

There is a world of difference in performances vs the steam desktop client (on Ubuntu, in my case). I would like to have my personnal "SteamOS server" but the steamcompmgr (steamos-compositor) seems to be causing a lot of stuttering with in-home streaming.

Thanks again!

[TTimo]

@mohandevir there is some activity related to the compositor on the SteamOS tracker - https://github.com/ValveSoftware/SteamOS/issues/676

In particular there is a third party fork that might have some fixes.

As far as Valve supported, I'm afraid compositor work on brewmaster isn't very high on the priorities list right now :(

[Mohandevir]

At least, thanks for the input. I'll try that and come back if it fixes my issues.

TTimo lähetti viestin:

I'm afraid compositor work on brewmaster isn't very high on the priorities list right now :(

Not waiting on it, but It raises my hopes for Clockwerk. ;)

[Redface]

Thanks for the updates, no problems installing them for me.

[Rav8es]

This problem still persists on my machine as stated in Github (getting no response):

https://github.com/ValveSoftware/Dota-2/issues/1581

[Mohandevir]

TTimo lähetti viestin:

@mohandevir there is some activity related to the compositor on the SteamOS tracker - https://github.com/ValveSoftware/SteamOS/issues/676

In particular there is a third party fork that might have some fixes.

Mohandevir lähetti viestin:

At least, thanks for the input. I'll try that and come back if it fixes my issues.

Nope. It doesn't solve the issue, but the colored frame, when starting a proton title, is gone. I sent a message to the maintainer to see if something can be done...

[Mohandevir]

TTimo lähetti viestin:

@mohandevir there is some activity related to the compositor on the SteamOS tracker - https://github.com/ValveSoftware/SteamOS/issues/676

In particular there is a third party fork that might have some fixes.

As far as Valve supported, I'm afraid compositor work on brewmaster isn't very high on the priorities list right now :(

Do you know if there is an easy way to turn off the built-in compositor vsync, for testing purpose? Talking to Alkazar led him to think that SteamOS' vsync might be the culprit.

Thanks again for your awesome work!

[Snowden_in_Russia...]

gibblets lähetti viestin:

Nice to see the security is being kept up to date, looking forward to see what the future holds.

with two release per year.. i wonder if security is so much their concern...
some websites specialized in distros linux : are no more considering this as an os...
last update they did was 4 years ago ...no ?
2015-06-26: Development Release: SteamOS 2.0 Preview

and they are checking a lot the linux gaming :

Headlines:
•2019-01-09 Linux well supported by popular games
•2018-10-29 Over 2,600 Windows Steam games now run on Linux
•2018-08-22 Steam to run Windows games on Linux

https://distrowatch.com/table.php?distribution=steamos

by the way ...unreal will soon provide a real linux os for gamer... they have the best engine for gaming , they opened a game distributor on the web ..
i am sure they will not make all the mistakes that did " valve ' s boss" during the years his games were top ... " his business with games like svencoop that still not has a hl2 beta .. but a lot of hl updates that no-one cares or so.. or of course black-zilla-mesa still not finished ...that behaves like svencoop at the time of sc3 ... they all deserve to think of their work "probably the best ...in the world " or probably surely NOT ... LOL

[Eeshan Mulye]

Very good to hear

[testman]

Awesome, nice to see SteamOS still being developed

[Green Orange]

Its not Developed, only Maintained to keep stuff working.

As far as I can see, there hasn't been any development (features and improvements) for some time now.

Any announcement on the purpose of SteamOS these days, since this project doesn't seem to be going anywhere?

Feels like its only used as a Proof of Concept for another project. Guessing that Valve also want a piece of the game streaming business and uses this to tackle unknow factors and gather data?

[Cyzyco]

I disagree, proton is a new feature. steamos follow Debian release, probaly Debian 9 is the base to clockwork. OS stables like Debian or Centos are slow on new features. But It is not the most lucrative product from Valve.

[Green Orange]

Wasn't Proton part of the Steam client for linux? If so, then steamOS just includes updates of the steam client (maintenance).

Sadly, Linux probably never gets populair as a desktop gaming OS. After years of work from valve this seems obvious, since nothing significantly changed. Valve probably knows this better than anyone, which makes me ask why valve needs Linux, Proton and Game Streaming.

Since all the huge companies and some smaller ones invest in game streaming services, its hard to think that valve isn't. Combine that with the extra possibilities of cloud game streaming (bigger worlds, shared resources, less complex game code, better anti cheating options, lower hardware requirements, monthly fees, etc).

It seems reasonable to believe that valve is planning their own game streaming service and plan to use Linux, Proton and remote streaming as tools to reach that goal. I don't see any other commercial benefits.

[/proc/self/nolimits]

I believe that they need it because they cant rely on Microsoft as the foundation for their service.
And they are right on thinking that.
Also, I believe steamos can be used as a gaming platform in the same way as freebsd is/used to be the platform for playstation.