JBoss Enterprise Application Platform 6.4 Update 09 Release Notes
Important: This update is not the latest cumulative patch, it is recommended to apply the latest update, see these links for the latest:
In order to better meet customer expectations, micro releases for JBoss EAP 6 have been discontinued and replaced with updates delivered on a repeating schedule, targeting a new release every 6 weeks.
Each new update will contain a number of bug fixes for customer reported issues and potentially a number of security fixes. We expect that the updates will substantially reduce the number of individual patches that we produce and that customers must manage to keep their installations up to date.
For more information see the following Red Hat Knowledgebase articles: Maintenance Release Changes in EAP 6.2+ and Updated Patch Management with EAP 6.2+
This update includes all fixes and changes from This content is not included.JBoss EAP 6.4 Update 8 / Release Notes
This update includes fixes for the following security related issues:
| ID | Component | Summary |
|---|---|---|
| CVE-2015-5174 | Web | URL Normalization issue |
| CVE-2016-2141 | Clustering | Authentication of JGroups messages only applies when joining the cluster |
This update includes the following bug fixes or changes:
| ID | Component | Summary |
|---|---|---|
| This content is not included.1202911 | Class Loading | Class loader loads extra services from modules [details] |
| This content is not included.1336088 | Clustering | JGroups TP.registerProbeHandler not thread safe [details] |
| This content is not included.1325376 | Clustering | Failover of HASingleton service is not correct if a Custom election policy is used and a node crash [details] |
| This content is not included.1328120 | Clustering | EAP+JDG sessions entries are removed from cache on shutdown |
| This content is not included.1291710 | Domain Management | Invalid unmanaged deployment breaks working managed deployments [details] |
| This content is not included.1327093 | Domain Management | Deployment issue after restart in JBoss EAP 6.4 [details] |
| This content is not included.1328997 | Domain Management | server instances cannot find keytab during domain startup This content is not included.[details] |
| This content is not included.1310908 | EJB | EJBs accessible too early (spec violation) |
| This content is not included.1330677 | EJB | EJB authorization can happen before the EJB's dependencies are properly setup [details] |
| This content is not included.1305960 | EJB | EJB timer scheduler log an Exception for an already canceled timer |
| This content is not included.1326333 | Hibernate | Default group sequence does not honour group hierarchy |
| This content is not included.1326334 | Hibernate | Group sequences don't honor inheritance relationships properly |
| This content is not included.1307263 | Hibernate | HV-665 - Consider concerned constraint in identity of constraint violations |
| This content is not included.1347739 | HornetQ | Fix calculation problem caused by BZ1320640 |
| This content is not included.1222900 | HornetQ | HornetQ-1254 - forward-when-no-consumers = false is forwarding when it should not This content is not included.[details] |
| This content is not included.1339881 | HornetQ | HornetQ still logs truststore and keystore passwords in plain text. |
| This content is not included.901300 | JCA | @Resource injection of Datasource on clustered SFSB fails with serialization error |
| This content is not included.1336341 | JMS | In rare circumstances HornetQ MessageProducer can send a message to wrong queue. |
| This content is not included.1327510 | JMS | When creating JMS bridge management API should pass bridge name to HornetQ |
| This content is not included.1318926 | JMS | Client Hang due to Long Default Read Timeout in LargeMessageControllerImpl |
| This content is not included.1327502 | JMS | HornetQ JMS Bridge should have bridge name in its logging. |
| This content is not included.1320640 | JMS | Warn on startup when confirmation-window-size and duplicate-cache-size don't correlate This content is not included.[details] |
| This content is not included.1324143 | JMS | can not read ObjectMessage's object when security manager is set This content is not included.[details] |
| This content is not included.1323924 | JSF | JAVASERVERFACES-3563 - ClientBehavior produces NullPointerException [details] |
| This content is not included.1323920 | JSF | JAVASERVERFACES-3545 - ComponentSupport.getFaceletComponentMap() returns wrong components when using dynamic includes / JAVASERVERFACES-3698 [details] |
| This content is not included.1324572 | Logging | LogContexts are not removed for ear subdeployments [details] |
| This content is not included.1342660 | MSC | MSC-148 - Deadlock when using StabilityMonitor |
| This content is not included.1342657 | MSC | MSC-144 - High number of "MSC service thread" in multicore Machines |
| This content is not included.1342658 | MSC | MSC-146 - Ensure that threads are created in a privileged context |
| This content is not included.1324385 | MSC | MSC-145 - avoid NullPointerException in org.jboss.msc.service.OptionalDependency.getController() when server starts up [details] |
| This content is not included.1330599 | PicketLink | SAML2LogoutHandler should create logout request with nameid format [details] |
| This content is not included.1329314 | Server | SAR file for mbean test case deploys in EAP5 but not in EAP6 [details] |
| This content is not included.1310603 | Transaction Manager | XA-Transaction commit inconsistent when slowing down process [details] |
| This content is not included.1329142 | Transaction Manager | Throw XAException in XATerminator::commit if a wrapped resource fails transiently |
| This content is not included.1333245 | Transaction Manager | Recover of transaction started by MDB on WSMQ when RAR is deployed as an archive does not work(JTS) |
| This content is not included.1312318 | Web | After upgrading to EAP 6.4.6 some of the attributes are not resolved by x:transform [details] |
| This content is not included.1312501 | Web Services | CXF-6799 - java.lang.ClassCastException: sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl cannot be cast to java.lang.reflect.TypeVariable [details] |
Note: This update should only be applied to installer or zip-based installations.
To apply this update using the CLI on Unix-based systems, run the following command from JBOSS_HOME:
bin/jboss-cli.sh "patch apply path/to/jboss-eap-6.4.9-patch.zip"
To apply this update using the CLI on Windows-based systems, run the following command from JBOSS_HOME:
bin\jboss-cli.bat "patch apply path\to\jboss-eap-6.4.9-patch.zip"
These commands will apply the update to the installation that contains the CLI script. Other scenarios and use of the management console are covered in the This content is not included.JBoss EAP 6.4 Installation Guide