When working on ENTESB-15511, I found that I have to replace (during patching) lib/ext/bcprov-jdk15on-1.66.jar file with lib/ext/bcprov-jdk15on-1.68.jar.
Normally it can be done only in rollup patch, where the lib/ directory is one of the managed directories, which is wiped out before applying the version from rollup patch.

We had never a reason to patch such file in non-rollup mode. I fact we had never a need (a plan) to do non-rollup patches for Fuse 7...