pdfbox-app is bundling several libraries, including: icu4j apache-commons-logging bouncycastle fontbox jempbox
Hmm, in fact it appears to be nothing more than a bundling of those items so I think I'm just going to drop that sub-package.
Fixed in pdfbox-1.6.0-5.fc18