diff --git a/expat-2.2.10.tar.xz b/expat-2.2.10.tar.xz
new file mode 100644
index 0000000..8c01456
--- /dev/null
+++ b/expat-2.2.10.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5dfe538f8b5b63f03e98edac520d7d9a6a4d22e482e5c96d4d06fcc5485c25f2
+size 425432
diff --git a/expat-2.2.10.tar.xz.asc b/expat-2.2.10.tar.xz.asc
new file mode 100644
index 0000000..39f06f9
--- /dev/null
+++ b/expat-2.2.10.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=8lxt
+-----END PGP SIGNATURE-----
diff --git a/expat-2.2.9.tar.xz b/expat-2.2.9.tar.xz
deleted file mode 100644
index a96ed97..0000000
--- a/expat-2.2.9.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1ea6965b15c2106b6bbe883397271c80dfa0331cdf821b2c319591b55eadc0a4
-size 422460
diff --git a/expat-2.2.9.tar.xz.asc b/expat-2.2.9.tar.xz.asc
deleted file mode 100644
index d78b349..0000000
--- a/expat-2.2.9.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEy43nCpDPv2w79cxWliYqz/vTrsYFAl2L5I4ACgkQliYqz/vT
-rsaOqhAAhykdC3k2DE1tL48Bp1nd++25QQyqUYp697Jjyp0jzTEpV0eIIzR+l7pS
-VSUOJoCwkSOarDhkX++tbsS8CN27ayXMcP+tUntImSRp5bdmbIyrHoPYZibksQd/
-eUk4hW4EWf97d+jKPAZwlDKQUO9XLJE939iu3TYeOsZ7ehNbbsJwZzsHALfBRO1E
-wb5BzjaBORfIT1VbcisD4dbNbULSW1HixuT5mugh59HSjrwYCzxc9izbItG3GJJi
-Qys6qqyCbP1WROZum++4M8s3OTn/gdgoqIOpug0Cc8w2vQA4lqy75oxRYxBFgyD6
-sXvnkZvsRseFWKbWjkS9wD8wEkCbEaASqCHmE8GaWTqS8FD78KFZ5sFMvm3nPW2T
-gpVNZ06itiQs/VAZxi/a5Gu8O2K6qWeZBjD2IymC+GyfPDLcvppnlxKZvvScAUdl
-VRivAh9eRYLyBIAw+hkBM3Mx6az3+yw/TLB6PR56Jh7IjSA8q6h5KEUvbQkXK/4b
-kxK0hLpsCi1Zyn4Mqh8HOl+aZU01/7f2N1wtu+Qwmt281yexqlekji2XzCNde6H4
-8sGl/eXVkR3ZUxrRDUOa+c1DzmIcmXoCNqp2jgpVcy+7OeOz9pKxjVSssvtH1KrM
-4GsFbBgCdCNBUE/E/iYC080S6Zd/M1pUa53644Zx6t9Mxhia900=
-=QV4U
------END PGP SIGNATURE-----
diff --git a/expat.changes b/expat.changes
index 156a84e..85ddd99 100644
--- a/expat.changes
+++ b/expat.changes
@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Sun Oct  4 19:19:55 UTC 2020 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 2.2.10:
+  * Bug fixes:
+    - Fix undefined behavior during parsing caused by pointer
+      arithmetic with NULL pointers
+    - Fix reading uninitialized variable during parsing
+    - xmlwf: Add missing check for malloc NULL return
+  * Other changes:
+    - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
+      (rather than code 1) for output errors when used with "-d DIRECTORY"
+    - Autotools: Use -Werror while configure tests the compiler for
+      supported compile flags to avoid false positives
+    - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
+      ensure that they have the last word over flags added while
+      running ./configure
+    - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
+      on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
+    - CMake: Detect and deny unsupported build combinations
+      involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
+    - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
+      of -DEXPAT_BUILD_DOCS=OFF
+    - CMake: Fix use of Expat by means of add_subdirectory
+    - CMake: Keep expat target name constant at "expat" (i.e. refrain
+      from using the target name to control build artifact filenames)
+    - CMake: Expose man page compilation as target "xmlwf-manpage"
+    - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
+      generation of pkg-config file "expat.pc"
+    - CMake: Add minimalistic support for building binary packages
+      with CMake target "package"; based on CPack
+    - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
+      OFF to build fuzzer code against OSS-Fuzz and related
+      environment variable LIB_FUZZING_ENGINE
+    - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
+    - Address compiler warnings
+    - Address pngcheck warnings with doc/*.png images: Version info
+      bumped from 7:11:6 to 7:12:6
+
 -------------------------------------------------------------------
 Fri Nov 29 18:30:43 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
 
diff --git a/expat.spec b/expat.spec
index 04ae734..21ae52d 100644
--- a/expat.spec
+++ b/expat.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package expat
 #
-# Copyright (c) 2019 SUSE LLC
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,9 +16,9 @@
 #
 
 
-%global unversion 2_2_9
+%global unversion 2_2_10
 Name:           expat
-Version:        2.2.9
+Version:        2.2.10
 Release:        0
 Summary:        XML Parser Toolkit
 License:        MIT