diff --git a/download.lst b/download.lst
index eb5a5ace0d06..f74380d24cc5 100644
--- a/download.lst
+++ b/download.lst
@@ -111,8 +111,8 @@ ETONYEK_TARBALL := libetonyek-0.1.$(ETONYEK_VERSION_MICRO).tar.xz
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts
-EXPAT_SHA256SUM := 3ad89b8588e6644bd4e49981480d48b21289eebbcd4f0a1a4afb1c29f99b6ab4
-EXPAT_TARBALL := expat-2.8.2.tar.xz
+EXPAT_SHA256SUM := f6256df90c906773d344da084402b7d3e4f22ed41b1a59c989098a83d3ea0c85
+EXPAT_TARBALL := expat-2.8.3.tar.xz
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts