diff --git a/packaging/3rdParty-devel/CMakeLists.txt b/packaging/3rdParty-devel/CMakeLists.txt
index 1ad4e9f28..001b50682 100644
--- a/packaging/3rdParty-devel/CMakeLists.txt
+++ b/packaging/3rdParty-devel/CMakeLists.txt
@@ -307,13 +307,13 @@ ExternalProject_Add(libvorbis-1.3.6
 endif(OPTION_VORBIS)
 
 if(OPTION_EXPAT)
-   set(EXPAT_PROJECT expat-2.2.8)
+   set(EXPAT_PROJECT expat-2.2.9)
 #disable building unneeded sub projects (they failed with VS2008)
 set(EXPAT_ARGS ${EXTERNALS_CMAKE_ARGS} -DEXPAT_BUILD_TESTS=off -DEXPAT_BUILD_EXAMPLES=off -DEXPAT_BUILD_TOOLS=off -DCMAKE_DEBUG_POSTFIX='')
 ExternalProject_Add(${EXPAT_PROJECT}
    DOWNLOAD_NAME ${EXPAT_PROJECT}.tar.bz2
-   URL https://sourceforge.net/projects/expat/files/expat/2.2.8/expat-2.2.8.tar.bz2/download
-   URL_HASH SHA256=9a130948b05a82da34e4171d5f5ae5d321d9630277af02c8fa51e431f6475102
+   URL https://sourceforge.net/projects/expat/files/expat/2.2.9/expat-2.2.9.tar.bz2/download
+   URL_HASH SHA256=f1063084dc4302a427dabcca499c8312b3a32a29b7d2506653ecc8f950a9a237
    CMAKE_ARGS ${EXPAT_ARGS}
    #UPDATE_COMMAND ""
    #PATCH_COMMAND ""