libxml2 security fixes