Hi Ovidiu- Ok so we would have to do: Overwrite jboss-remoting.jar in server/lib with the latest one Overwrite the ejb3 jars in server/lib with the ones patched already Carlos (I wonder if the patch is in a GA of EJB3 yet?) Overwrite jboss-aop.jar with the latest one. You say web services will be a problem - do you have any more details? Would we need to patch web services, or patch remoting? Cheers View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4037656#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...