This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs . - CVE-2022-25235: Fixed UTF-8 character validation in a certain context . - CVE-2022-25313: Fixed stack exhaustion in build_model via uncontrolled recursion . - CVE-2022-25314: Fixed integer overflow in copyString . - CVE-2022-25315: Fixed integer overfl ...