diff --git a/download.lst b/download.lst
index 444afbe7e733..b428d6b28d58 100644
--- a/download.lst
+++ b/download.lst
@@ -111,8 +111,8 @@ ETONYEK_TARBALL := libetonyek-0.1.$(ETONYEK_VERSION_MICRO).tar.xz
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts
-EXPAT_SHA256SUM := 9e9cabb457c1e09de91db2706d8365645792638eb3be1f94dbb2149301086ac0
-EXPAT_TARBALL := expat-2.7.4.tar.xz
+EXPAT_SHA256SUM := 1032dfef4ff17f70464827daa28369b20f6584d108bc36f17ab1676e1edd2f91
+EXPAT_TARBALL := expat-2.7.5.tar.xz
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts