version up: Expat 2.2.9, including security fixes.

component/libexpat/buildout.cfg

 [buildout]
+extends =
+  ../lunzip/buildout.cfg
 parts =
   libexpat
 
 [libexpat]
 recipe = slapos.recipe.cmmi
 shared = true
-url = http://downloads.sourceforge.net/project/expat/expat/2.2.1/expat-2.2.1.tar.bz2
-md5sum = d9c3baeab58774cefc2f04faf29f2cf8
+url = https://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.lz
+md5sum = c356e4f2092df4f0b0ffef904f001842
 configure-options =
   --disable-static
+  --without-xmlwf
+  --without-examples
+  --without-tests
+  --without-docbook
+environment =
+  PATH=${lunzip:location}/bin:%(PATH)s