[arch-dev-public] [signoff] expat-2.0.1-5

Updated fix for CVE-2009-3560. Upstream reverted the initial fix as it was broken. Signoff both, Allan