The richfaces-build manages commons-codec version to 1.6 - do you need to upgrade here?