An unbreakable Enterprise kernel security update has been released for Oracle Linux 7.

El-errata: ELSA-2020-5879 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2020-5879

  http://linux.oracle.com/errata/ELSA-2020-5879.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-firmware-3.8.13-118.50.1.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-118.50.1.el7uek.noarch.rpm
kernel-uek-3.8.13-118.50.1.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-118.50.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-118.50.1.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-118.50.1.el7uek.x86_64.rpm
dtrace-modules-3.8.13-118.50.1.el7uek-0.4.5-3.el7.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-118.50.1.el7uek.src.rpm
  http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-118.50.1.el7uek-0.4.5-3.el7.src.rpm


Description of changes:

kernel-uek
[3.8.13-118.50.1.el7uek]
- USB: serial: omninet: fix reference leaks at open (Mark Nicholson)
[Orabug: 30484762] {CVE-2017-8925}
- GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob
Peterson) [Orabug: 30254252] {CVE-2016-10905}
- GFS2: Fix rgrp end rounding problem for bsize < page size (Bob
Peterson) [Orabug: 30254252] {CVE-2016-10905}
- GFS2: Use range based functions for rgrp sync/invalidation (Steven
Whitehouse) [Orabug: 30254252] {CVE-2016-10905}
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing)
[Orabug: 30732940] {CVE-2019-20054}
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
(YueHaibing) [Orabug: 30732940] {CVE-2019-20054}
- scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan)
[Orabug: 30770914] {CVE-2019-19965}
- ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)
[Orabug: 31351573] {CVE-2019-19073}
- USB: serial: io_ti: fix information leak in completion handler (Johan
Hovold) [Orabug: 31352085] {CVE-2017-8924}
- mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)
[Orabug: 31884241] {CVE-2020-25285}
- ext4: fix potential negative array index in do_split() (Eric Sandeen)
[Orabug: 31895332] {CVE-2020-14314}