jeta is bundling many libraries, including: bouncycastle java.security.spec javax.crypto javax.xml apache-commons-logging
Actually it's worse than that. I think Jeta needs to be tossed from the distribution altogether. I'm not even sure if the included jar can actually be built from any source; at least I've not found any. It was first included at a time when we didn't check for such things.
This package has been retired and blocked from F17 and later. No way to remove it from existing Fedora releases.