...
Apache CXF 3.0.16 delivers the latest set of patches and bug fixes for Apache CXF 3.0.x. This release fixes 3 JIRA issues that have been reported by users. In particular, it includes the fix for the security advisory CVE-2017-12624.
This is the last planned release for CXF 3.0.x - users are encouraged to upgrade to CXF 3.1.x or 3.2.x.
...