libxml2: bump 2.9.0 -> 2.9.1 (CVE-2013-1969)

And drop patch that has been merged upstream.