AZL-8624 CVE-2022-25314 affecting package expat for versions less than 2.4.8-1

In Expat aka libexpat before 2.4.5, there is an integer overflow in copyString...