diff --git a/RELEASE-NOTES-1.36 b/RELEASE-NOTES-1.36
index 8abe20ef000..77d84629100 100644
--- a/RELEASE-NOTES-1.36
+++ b/RELEASE-NOTES-1.36
@@ -147,9 +147,9 @@ is no longer recommended and the option has been removed.
 * Updated wikimedia/less.php from 3.0.0 to 3.1.0.
 * Updated wikimedia/object-factory from 2.1.0 to 3.0.0.
 * Updated wikimedia/remex-html from 2.2.0 to 2.2.2.
-* Updated wikimedia/xmp-reader from 0.7.0 to 0.8.0.
 * Updated wikimedia/utfnormal from 2.0.0 to 3.0.2.
 * Updated wikimedia/wait-condition-loop from 1.0.1 to 2.0.1.
+* Updated wikimedia/xmp-reader from 0.7.0 to 0.8.1.
 * …
 
 ===== Changed development-only external libraries =====
diff --git a/composer.json b/composer.json
index fd8f56157f8..a94c9b66bc9 100644
--- a/composer.json
+++ b/composer.json
@@ -70,7 +70,7 @@
 		"wikimedia/timestamp": "3.0.0",
 		"wikimedia/wait-condition-loop": "2.0.1",
 		"wikimedia/wrappedstring": "3.2.0",
-		"wikimedia/xmp-reader": "0.8.0",
+		"wikimedia/xmp-reader": "0.8.1",
 		"zordius/lightncandy": "1.2.5"
 	},
 	"require-dev": {