WIP: libxml2: bump 2.9.0 -> 2.9.1 (security fix ++)

TODO: Can we drop the patch that doesn't apply anymore?

CVE-2013-1969