libcommons-openpgp-java shouldn't be affected. It has been updated upstream to depend on the latest version of BouncyCastle (1.48) and no modification was needed. It compiled and ran fine as is.
Description: Signature cryptographique S/MIME
__ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.