Well, there is a patch atached. You can check out 3.6.4 source code, apply the patch, compile Openfire and get updated libraries. Maybe openfire.jar would be enough. Though maybe this patch relies on new logging system introduced in 3.7.0. Anyway, this doesn’t look like a pretty way for production environment. So maybe you should wait for 3.7.0. Can’t tell when it may come out.