WS-S after upgrade fails with org.apache.ws.security.WSSecurityException: The signature or decryption was invalid https://issues.apache.org/jira/browse/CXF-5679 Extra text and comments after </soapenv:Body> are treated as part of SOAP body by CXF https://issues.apache.org/jira/browse/CXF-5724
Verified with 6.4.0.DR8