Steps to Reproduce:

1. Deploy the attached icefaces3-portlet-3.0.0-SNAPSHOT.war to the Liferay Portal 6.2 /deploy folder

2. Add a new page named ICE3

3. Add the portlet named ICEfaces3 to the ICE3 portal page

4. Re-render the ICE3 portal page

5. Click the Submit button, and all of the form fields turn red/invalid except for the Date of Birth field

6. In the ZIP Code field, type: 32801

7. Press the TAB key on the keyboard in order to blur out of the ZIP code field

8. Note that the City field contains "Orlando" and the "State" dropdown contains "FL"

9. Repeat steps 1-7 for the attachment icefaces4-portlet-4.0.0-SNAPSHOT.war (using a paged named ICE4 instead of ICE3).

If the bug is fixed, then the City field should contain "Orlando" and the "State" dropdown contains "FL"

Otherwise, if the bug still exists, then the City field will not contain a value.

Here is the source code for the [icefaces3-portlet|https://github.com/liferay/liferay-faces-bridge-impl/blob/3.x/demos/icefaces3-portlet] and [icefaces4-portlet|https://github.com/liferay/liferay-faces-bridge-impl/blob/4.x/demos/icefaces4-portlet/].

Note that the code that triggers the XHR is [line#73 of applicant.xhtml|https://github.com/liferay/liferay-faces-bridge-impl/blob/4.x/demos/icefaces4-portlet/src/main/webapp/WEB-INF/views/applicant.xhtml#L73]:
{code}
<ace:ajax execute="@this" render="postalCodeField provinceIdField cityField" />
{code}
... which simply calls a ValueChangeListener at [line#142 of ApplicantBackingBean.java|https://github.com/liferay/liferay-faces-bridge-impl/blob/4.x/demos/icefaces4-portlet/src/main/java/com/liferay/faces/demos/bean/ApplicantBackingBean.java#L142].

It appears as though the {{cityField}} is not getting re-rendered, even though it is specified in the render attribute of {{ace:ajax}}.