JBoss EAP 5.1.2 patches

Latest response

Is there a simple way to tell if newer patched versions of a jar roll-up previous patched versions of the same jar (including security patches) for the same EAP version of JBoss?


E.g. JBoss EAP 5.1.2 patches jbossweb.jar in JBPAPP-7790 + JBPAPP-8108. JBPAPP-8108 is newer (release date, date stamp of jar + JBPAPP # is higher). Can I expect the JBPAPP-8108 patch to include the JBPAPP-7790 patch security fixes?


Any references to a best practice doc/thread that explains JBoss patching policy would be appreciated.






Apologies in the delay to answering this question.


Patches are not cumulative and thus JBPAPP-8108 (X) would not be included in JBPAPP-7790 (Y) unless it was explicitly stated.


If in your environment you are experiencing both of these issues then please raise a support case and we will look in to it for you.


More information on this can be found on the customer portal [1] and also on a post on this forum [2]. Please let me know if you have any further questions.


[1] https://access.redhat.com/support/policy/updates/jboss_notes/

[2] https://access.redhat.com/discussion/how-do-you-tell-if-bug-youve-found-fixed-version-eap