Apply upstream security patch

- Resolves: CVE-2013-7285

xstream.spec

@@ -36,7 +36,7 @@
 
 Name:           xstream
 Version:        1.3.1
-Release:        5%{?dist}
+Release:        5.1%{?dist}
 Summary:        Java XML serialization library
 
 Group:          Development/Libraries
@@ -44,6 +44,9 @@ License:        BSD
 URL:            http://xstream.codehaus.org/
 Source0:        http://repository.codehaus.org/com/thoughtworks/%{name}/%{name}-distribution/%{version}/%{name}-distribution-%{version}-src.zip
 
+# Backported from upstream revision 2210
+Patch0:         %{name}-CVE-2013-7285.patch
+
 BuildRoot:      %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
 
 BuildRequires:  jpackage-utils >= 0:1.7.2
@@ -105,6 +108,7 @@ Requires:       jpackage-utils
 
 %prep
 %setup -qn %{name}-%{version}
+%patch0 -p1
 find . -name "*.jar" -delete
 
 %if %with test
@@ -200,6 +204,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Tue Feb 11 2014 Mikolaj Izdebski <mizdebsk@redhat.com> - 1.3.1-5.1
+- Apply upstream security patch
+- Resolves: CVE-2013-7285
+
 * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-5
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild