I have no idea. Ask Norman. I'm sure any recent release will do.
I'm sure it is the one used in JBoss 4, which is:
<componentref name="cglib" version="2.1.3.nodep"/>
Thanks Norman, you were right. The md5:
matches the following file