cxf-bundle-jaxrs isn't mentioned in here:
http://cxf.apache.org/docs/using-cxf-with-maven.html

it pulls in a lot we don't need and we try to exclude what we don't need (but fail at it).

Furher proof that cxf-bundle-jaxrs is evil:
http://svn.apache.org/repos/asf/cxf/trunk/distribution/bundle/jaxrs/pom.xml
It uses the maven-shade-plugin, which is a blocker for the Red Hat re-packers team (see fosdem 2011 presentation)