AZL-7157 CVE-2022-22823 affecting package expat for versions less than 2.4.3-1

buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...