The Apache commons-logging package has release version 1.1.0.

Please upgrade this library to take advantage of items listed in the release notes:
http://jakarta.apache.org/commons/logging/RELEASE-NOTES.txt

It would be helpful if this upgrade can be done to upgrade the server libraries since individual EAR files cannot overwrite this particular library.

Also, looking through the notes and searching for information on the 1.0.4 patch, it appears that the WeakHashTables memory-leak fix is included in 1.1.0. (Bug 31286: http://issues.apache.org/bugzilla/show_bug.cgi?id=31286)

Depending on how JBoss uses this package, upgrading should be as simple as replacing the current package (though I admit I had not try doing so yet).