diff --git a/_constraints b/_constraints
new file mode 100644
index 0000000..4cdf591
--- /dev/null
+++ b/_constraints
@@ -0,0 +1,9 @@
+<?xml version="1.0"?>
+<constraints>
+  <hardware>
+    <disk>
+      <!-- Needed because PPC chronically runs out of disk because sigghhh -->
+      <size unit="G">25</size>
+    </disk>
+  </hardware>
+</constraints>
diff --git a/rustup.changes b/rustup.changes
index 0b1810a..c7a0cf1 100644
--- a/rustup.changes
+++ b/rustup.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Sep 26 05:41:12 UTC 2022 - william.brown@suse.com
+
+- Update vendored dependencies
+- bsc#1196972 - CVE-2022-24713 - Regex denial of service
+- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
+
 -------------------------------------------------------------------
 Fri Sep 09 01:44:21 UTC 2022 - william.brown@suse.com
 
diff --git a/vendor.tar.xz b/vendor.tar.xz
index 152b26a..f0bdd83 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e5aea4b7a8749925f20bab4e2f643ce15bce9f501ed9e3692c05b06925fe223e
-size 34087384
+oid sha256:0c3a9283a7f29fdbf5374159c083f41d91904c372f18ad5063c708ebc15feb12
+size 34112340