Created attachment 1059405 [details]
r13732.patch

Attach revision 13732 patch, real fix is part:

Index: jsf-api/src/main/java/javax/faces/component/AttachedObjectListHolder.java
===================================================================
--- jsf-api/src/main/java/javax/faces/component/AttachedObjectListHolder.java	(revision 13731)
+++ jsf-api/src/main/java/javax/faces/component/AttachedObjectListHolder.java	(revision 13732)
@@ -157,7 +157,7 @@
             for (int i = 0, len = attachedObjects.length; i < len; i++) {
                 T restored = (T) ((StateHolderSaver) attachedObjects[i]).restore(context);
                 if (restored != null) {
-                    this.attachedObjects.add(restored);
+                    add(restored);
                 }
             }
         } else {

qa_acking
Fix in https://github.com/jboss/jboss-jsf-api_spec/tree/jboss-jsf-api_2.1_spec-2.1.28.1.Final corresponds to patch shown in Comment 3

Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.

Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.