Apply upstream security patch

- Resolves: CVE-2013-7285

xstream.spec

@@ -36,7 +36,7 @@
 
 Name:           xstream
 Version:        1.3.1
-Release:        8%{?dist}
+Release:        9%{?dist}
 Summary:        Java XML serialization library
 
 Group:          Development/Libraries
@@ -44,6 +44,9 @@ License:        BSD
 URL:            http://xstream.codehaus.org/
 Source0:        http://repository.codehaus.org/com/thoughtworks/%{name}/%{name}-distribution/%{version}/%{name}-distribution-%{version}-src.zip
 
+# Backported from upstream revision 2210
+Patch0:         %{name}-CVE-2013-7285.patch
+
 BuildRoot:      %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
 
 BuildRequires:  jpackage-utils >= 0:1.7.2
@@ -105,6 +108,7 @@ Requires:       jpackage-utils
 
 %prep
 %setup -qn %{name}-%{version}
+%patch0 -p1
 find . -name "*.jar" -delete
 
 %if %with test
@@ -195,6 +199,10 @@ dummy = posix.readlink(dir) and os.remove(dir)
 
 
 %changelog
+* Tue Feb 11 2014 Mikolaj Izdebski <mizdebsk@redhat.com> - 1.3.1-9
+- Apply upstream security patch
+- Resolves: CVE-2013-7285
+
 * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-8
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild