smack: 3.4.1 -> 4.1.9, fixe CVE-2016-10027

cc #21642

pkgs/development/libraries/java/smack/builder.sh

···
 cd smack
 tar xfvz $src
 mkdir -p $out/share/java
-cp smack-*.jar $out/share/java
+cp libs/smack-*.jar $out/share/java

pkgs/development/libraries/java/smack/default.nix

···
 {stdenv, fetchurl}:
 
 stdenv.mkDerivation {
-  name = "smack-3.4.1";
+  name = "smack-4.1.9";
   builder = ./builder.sh;
-  
+
   src = fetchurl {
-    url = http://www.igniterealtime.org/downloadServlet?filename=smack/smack_3_4_1.tar.gz;
-    sha256 = "13jm93b0dsfxr62brq1hagi9fqk7ip3pi80svq10zh5kcpk77jf4";
+    url = http://www.igniterealtime.org/downloadServlet?filename=smack/smack_4_1_9.tar.gz;
+    sha256 = "009x0qcxd4dkvwcjz2nla470pwbabwvg37wc21pslpw42ldi0bzp";
   };
 
   meta = {