It's CVE time, again. Probably not affected by this, but good to update anyway. https://github.com/libexpat/libexpat/blob/R_2_6_4/expat/Changes