CVE-2020-0159: 
NixOS vulnerability analysis and mitigation

Red Hat JBoss Enterprise Application Platform 7.2.6 security update (RHSA-2020:0159) was released on January 20, 2020, addressing multiple security vulnerabilities in the platform. This update was rated as having an Important security impact by Red Hat Product Security (Red Hat Advisory).

The security update addresses multiple vulnerabilities including issues in Undertow HTTP server, JBoss CLI, Netty, Jackson-databind, and Hibernate-validator components. Notable fixes include a potential Denial of Service vulnerability in Undertow HTTP server (CVE-2019-14888), HTTP request smuggling in Netty (CVE-2019-16869), and multiple serialization gadget vulnerabilities in Jackson-databind affecting various packages (Red Hat Advisory).

The vulnerabilities could potentially lead to various security impacts including Denial of Service (DoS) in Undertow HTTP server, exposure of vault system property security attributes, HTTP request smuggling, and multiple serialization-related security issues that could potentially lead to code execution (Red Hat Advisory).

Red Hat recommends users to update to JBoss Enterprise Application Platform 7.2.6, which serves as a replacement for version 7.2.5. Before applying the update, users should back up their existing Red Hat JBoss Enterprise Application Platform installation and deployed applications (Red Hat Advisory).