expat: upgrade to release 2.6.3

Fixes CVE-2024-45490 CVE-2024-45491 CVE-2024-45492

Change-Id: I17f7d9a5c540e7d2005515f1f4fd79e0a5c631ca
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/173124
Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
Tested-by: Jenkins
(cherry picked from commit 4529ffc6439250bf3edc705117f9af1ad116dc36)
diff --git a/download.lst b/download.lst
index 4c3c428..a3c80e1 100644
--- a/download.lst
+++ b/download.lst
@@ -106,8 +106,8 @@
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts
-EXPAT_SHA256SUM := ee14b4c5d8908b1bec37ad937607eab183d4d9806a08adee472c3c3121d27364
-EXPAT_TARBALL := expat-2.6.2.tar.xz
+EXPAT_SHA256SUM := 274db254a6979bde5aad404763a704956940e465843f2a9bd9ed7af22e2c0efc
+EXPAT_TARBALL := expat-2.6.3.tar.xz
 # three static lines
 # so that git cherry-pick
 # will not run into conflicts