CVE-2014-3566. Disable SSLv3 protocols.
CVE-2011-4461. Fix for a potential DoS with form parameters

Patch from https://bugzilla.redhat.com/attachment.cgi?id=556318&action=diff
Patch modified to build with sourceVersion 1.4 (patch relies on autoboxing)
Pin version of maven war plugin to 2.1.1.

Otherwise a beta version runs, and builds fail in JDK 7
Update version to 6.1.26.cloudera.3