cvs: use checksummed patches