An enterprise kernel security update has been released for Oracle Linux 7

Oracle Linux Security Advisory ELSA-2019-4854

http://linux.oracle.com/errata/ELSA-2019-4854.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.40.1.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.40.1.el7uek.noarch.rpm
kernel-uek-3.8.13-118.40.1.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.40.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.40.1.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.40.1.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.40.1.el7uek-0.4.5-3.el7.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.40.1.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.40.1.el7uek-0.4.5-3.el7.src.rpm


Description of changes:

kernel-uek
[3.8.13-118.40.1.el7uek]
- USB: check usb_get_extra_descriptor for proper size (Mathias Payer)
[Orabug: 30045797] {CVE-2018-20169}
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes
Reinecke) [Orabug: 30393902] {CVE-2017-14991}
- usb: misc: legousbtower: Fix NULL pointer deference (Greg
Kroah-Hartman) [Orabug: 30412151] {CVE-2017-15102}
- floppy: fix div-by-zero in setup_format_params (Denis Efremov)
[Orabug: 30447844] {CVE-2019-14284}
- i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
(Jeremy Compostella) [Orabug: 30468842] {CVE-2017-18551}