diff --git a/subprojects/expat.wrap b/subprojects/expat.wrap
index a659cdf56..bcc5c03a1 100644
--- a/subprojects/expat.wrap
+++ b/subprojects/expat.wrap
@@ -1,12 +1,12 @@
 [wrap-file]
-directory = expat-2.4.8
-source_url = https://github.com/libexpat/libexpat/releases/download/R_2_4_8/expat-2.4.8.tar.xz
-source_filename = expat-2.4.8.tar.bz2
-source_hash = f79b8f904b749e3e0d20afeadecf8249c55b2e32d4ebb089ae378df479dcaf25
-patch_filename = expat_2.4.8-2_patch.zip
-patch_url = https://wrapdb.mesonbuild.com/v2/expat_2.4.8-2/get_patch
-patch_hash = e8855d668a0dee74dee909521c91d6723f564167fcad65507fec63b0f2b41f7e
-wrapdb_version = 2.4.8-2
+directory = expat-2.4.9
+source_url = https://github.com/libexpat/libexpat/releases/download/R_2_4_9/expat-2.4.9.tar.xz
+source_filename = expat-2.4.9.tar.bz2
+source_hash = 6e8c0728fe5c7cd3f93a6acce43046c5e4736c7b4b68e032e9350daa0efc0354
+patch_filename = expat_2.4.9-1_patch.zip
+patch_url = https://wrapdb.mesonbuild.com/v2/expat_2.4.9-1/get_patch
+patch_hash = 51b42d935008552f9d6c4d3e7511b84690a2a0c9d90165d1d192fc892f0a4787
+wrapdb_version = 2.4.9-1
 
 [provide]
 expat = expat_dep