Description of problem:
depends on dom4j:dom4j 1.6.1-redhat-4 but we package 1.6.1-redhat-5
should be 1.9.9-redhat-2
Unfortunately, there is not much we can do about the issue in the hibernate pom. The version listed in the pom is the version that was used to build it. It's expected that user builds include a dependency management pom which overrides transitive dependency version like this.
I think the version-master pom is correct, since the 1.9.9-redhat-1 version of jackson was the correct version when the version master pom was released. The 6.1.0-redhat-2 version of the pom contains the 1.9.9-redhat-2 version of jackson.