diff --git a/repos/spack_repo/builtin/packages/expat/package.py b/repos/spack_repo/builtin/packages/expat/package.py
index 6560f98560e..d9b8281891b 100644
--- a/repos/spack_repo/builtin/packages/expat/package.py
+++ b/repos/spack_repo/builtin/packages/expat/package.py
@@ -18,11 +18,16 @@ class Expat(AutotoolsPackage, CMakePackage):
     url = "https://github.com/libexpat/libexpat/releases/download/R_2_2_9/expat-2.2.9.tar.bz2"
 
     license("MIT")
+    version(
+        "2.8.4",
+        sha256="963250a823c16a498582b4ad82ad0f88926be0769675d3b6956be4d769a1cd8f",
+    )
+    # deprecate all releases before 2.8.4 because of various security issues
     version(
         "2.8.3",
         sha256="b4cc2483927d5e90bf8c40b44a6b95b368b42a8a96e25883fce188b48a92b670",
+        deprecated=True,
     )
-    # deprecate all releases before 2.8.3 because of various security issues
     version(
         "2.8.2",
         sha256="69e7f52417d85b1c2b7fe855e176eec55d0b2d7d92d691372d833a1c7df7923b",