I just noticed that the iText maven bundle is a bit tricksy and includes iText 5.6.6 as a dependency, with the latter being GPL licensed.
Actually Scott meant itextpdf (was clear in his message), and It turned out that not only itextpdf was a problem but the 4.2.0 version in its entirety as discovered in the thread.
The solution is to get back to the 2.1.7 version which is still MPL licensed.
I must note here that for the same reason the BIRT runtime that we use in OFBiz, and all BIRT runtime versions, are using the 2.1.7 version. There is more information on why in the thread mentionned above if needed.