Expat 2.5.0 released, includes security fixes

Weird, unable to get a noscript/basic (x)html download link on a tarball??