JBoss Enterprise Application Platform 6.4 Update 06 Release Notes
Important: This update is not the latest cumulative patch, it is recommended to apply the latest update, see these links for the latest:
In order to better meet customer expectations, micro releases for JBoss EAP 6 have been discontinued and replaced with updates delivered on a repeating schedule, targeting a new release every 6 weeks.
Each new update will contain a number of bug fixes for customer reported issues and potentially a number of security fixes. We expect that the updates will substantially reduce the number of individual patches that we produce and that customers must manage to keep their installations up to date.
For more information see the following Red Hat Knowledgebase articles: Maintenance Release Changes in EAP 6.2+ and Updated Patch Management with EAP 6.2+
This update includes all fixes and changes from This content is not included.JBoss EAP 6.4 Update 5 / Release Notes
This update includes fixes for the following security related issues:
| ID | Component | Summary |
|---|---|---|
| CVE-2015-0254 | Web | XXE and RCE via XSL extension in JSTL XML tags [details] |
This update includes the following bug fixes or changes:
| ID | Component | Summary |
|---|---|---|
| This content is not included.1249773 | CLI | CLI if/else is not handling special characters strings with parenthesis [details] |
| This content is not included.1265877 | Class Loading | ClassNotFoundException due to ldap config for HornetQ [details] |
| This content is not included.1250763 | Clustering | Multiple HA singletons from ServiceProviderRegistry bug |
| This content is not included.1276513 | EJB | EJB Server side is needlessly closing remoting channel [details] |
| This content is not included.1282661 | EJB | MessageDrivenComponent startDelivery/stopDelivery is not thread safe |
| This content is not included.1268468 | Hibernate | HHH-10161 - Hibernate ignores return value from javax.persistence.Parameter#getParameterType() |
| This content is not included.1273573 | Hibernate | HHH-10202 - Building clustered cache throws InvalidObjectException when replicating entities with composite ID |
| This content is not included.1265256 | Hibernate | HHH-5764 - AssertionFailure: Unexpected nested component on the referenced entity when mapping a @MapsId [details] |
| This content is not included.1288578 | HornetQ | HornetQ Client trying to use wrong keystore [details] |
| This content is not included.1295675 | HornetQ | Message Loss or Duplicate in cluster with network failures [details] |
| This content is not included.1267172 | HornetQ | Rebalance RA Connections after new cluster nodes [details] |
| This content is not included.1283465 | Infinispan | Failed to recover cluster state after the current node became the coordinator [details] |
| This content is not included.1280390 | JCA | JBoss WorkManager does not call WorkListener.workRejected at shutdown [details] |
| This content is not included.1259840 | JCA | Remove caching of the value of isTraceEnabled for JCA infrastructure [details] |
| This content is not included.1278334 | JMS | CPU Starvation causes duplicate messages [details] |
| This content is not included.1278606 | Naming | Remote Naming holding cache lock while closing leading to thread pile up [details] |
| This content is not included.1269979 | Other | org.jboss.sun.net.httpserver.SSLStreams return 0 upon eof instead of -1 [details] |
| This content is not included.1248156 | Remoting | Remoting Subsystem RemoteOutboundConnectionService is caching ConnectionURI causing issues when DNS changes [details] |
| This content is not included.1288664 | Remoting | ByteBuffer leaks via RemoteConnectionProvider |
| This content is not included.1196343 | Security | Fix LDAP authentication/authorization fails due to making unneeded role lookup requests, except IBM JDK 6 see BZ-1301732 This content is not included.[details] |
| This content is not included.1204300 | Security | Security ModuleClassLoaderLocator.CombinedClassLoader does not implement getResources causing Login Modules to not find existing resources [details] |
| This content is not included.1245363 | Server | Disable a datasource followed by re-enabled it in admin console produces error log [details] |
| This content is not included.1288251 | Server | JBEAP-2148 - Dependency for javassist not resolved for native Hibernate applications [details] |
| This content is not included.1270281 | Transaction Manager | Transaction probe needlessly locks CLI [details] |
| This content is not included.1235514 | Web | Web connectors metrics throws NumberFormatException when accessed via JMX and stats value is greater than MAX_INT [details] |
| This content is not included.1235627 | Web | Annotation must be scanned regardless of the version of web.xml unless metadata-complete is explicitly set to true [details] |
| This content is not included.1280327 | Web | Timing issue in StandardEngine.getBaseDir allows for sporadic NPE [details] |
| This content is not included.1245706 | Web Services | URL-encoded content ID for MTOM attachments causes problems with web service clients [details] |
| This content is not included.1267676 | Web Services | Invalid ?wsdl response with relative imports/includes when using jaxws-catalog.xml [details] |
| This content is not included.1182919 | Web Services | Apache CXF doesn't return SoapFault for HTTP 400 |
| This content is not included.1274059 | mod_cluster | JBoss hits IllegalStateException upon reload after adding modcluster subsystem [details] |
Note: This update should only be applied to installer or zip-based installations.
To apply this update using the CLI on Unix-based systems, run the following command from JBOSS_HOME:
bin/jboss-cli.sh "patch apply path/to/jboss-eap-6.4.6-patch.zip"
To apply this update using the CLI on Windows-based systems, run the following command from JBOSS_HOME:
bin\jboss-cli.bat "patch apply path\to\jboss-eap-6.4.6-patch.zip"
These commands will apply the update to the installation that contains the CLI script. Other scenarios and use of the management console are covered in the This content is not included.JBoss EAP 6.4 Installation Guide