diff --git a/_service b/_service
index 32b685c..6000e72 100644
--- a/_service
+++ b/_service
@@ -1,7 +1,7 @@
 <services>
   <service name="download_files" mode="manual"/>
   <service name="cargo_vendor" mode="manual">
-    <param name="srcdir">cryptography-42.0.2/src/rust</param>
+    <param name="srcdir">cryptography-42.0.4/src/rust</param>
     <param name="compression">zst</param>
   </service>
 </services>
diff --git a/python-cryptography.changes b/python-cryptography.changes
index 24c883d..b667f4b 100644
--- a/python-cryptography.changes
+++ b/python-cryptography.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed May 14 11:00:21 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update vendor tarball to fix CVE-2025-3416 (bsc#1242631)
+
 -------------------------------------------------------------------
 Thu Feb 22 17:10:39 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
 
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 90f0d99..185faa0 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8e06af528b28e87cdd465b889d18afb398871bf9592bd46153c2c94b3d61a8f7
-size 4912304
+oid sha256:32b8971e7c1a9aef22fa6d15114deb86c62aca6633386db5a8f0c50e5ea6c652
+size 5586631