expat: add security patch for CVE-2015-1283

Fixes:
CVE-2015-1283 - Multiple integer overflows in the XML_GetBuffer
function.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>