Pin deps
Where patched package versions are necessary do not pin
Merge pull request #388 from viglesiasce/pin-deps

Where possible pin dependencies to what is packaged in the target distro (CentOS 6)