diff --git a/_service b/_service
index 1c2a804..8ab7bba 100644
--- a/_service
+++ b/_service
@@ -19,6 +19,7 @@
   <service name="cargo_vendor" mode="disabled">
      <param name="srcdir">cargo-c</param>
      <param name="compression">xz</param>
+     <param name="update">true</param>
   </service>
   <service name="cargo_audit" mode="disabled">
      <param name="srcdir">cargo-c</param>
diff --git a/cargo-c-0.8.1~git0.cce1b08.tar.xz b/cargo-c-0.8.1~git0.cce1b08.tar.xz
index ef84605..7a964b0 100644
--- a/cargo-c-0.8.1~git0.cce1b08.tar.xz
+++ b/cargo-c-0.8.1~git0.cce1b08.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:81bfa4f0f3f9f98e270413025b4da8cde737375a0eb1f4e8c5e38713ccc301f3
-size 20736
+oid sha256:bb867d83ee0b88cbeec86e5f67077e4a7a7332dbaf1976208845bd14c2527096
+size 20796
diff --git a/cargo-c.changes b/cargo-c.changes
index 0852f15..c9661c5 100644
--- a/cargo-c.changes
+++ b/cargo-c.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Jan 06 06:58:06 UTC 2022 - william.brown@suse.com
+
+- resolve bsc#1194113 (CVE-2018-25023)
+- resolve bsc#1194119 (CVE-2021-45710)
+
 -------------------------------------------------------------------
 Wed Jun 02 05:40:32 UTC 2021 - william.brown@suse.com
 
diff --git a/cargo-c.spec b/cargo-c.spec
index efab0b1..ef278d9 100644
--- a/cargo-c.spec
+++ b/cargo-c.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package cargo-c
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 # Copyright (c) 2019 Andreas Schneider <asn@cryptomilk.org>.
 #
 # All modifications and additions to the file contributed by third parties
diff --git a/vendor.tar.xz b/vendor.tar.xz
index 70ecfa0..2e0a550 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b52c85fa56098e2aecd7563731a4477e8f1d54187a7ac598b06cce079b32c674
-size 22219724
+oid sha256:ce04fdecd6fb11c86e2769f42fe350182a09ea77bc554ff8a87f29ce70b4f264
+size 21495580