diff --git a/python-ruff.changes b/python-ruff.changes
index 0a18ce4..8c761a6 100644
--- a/python-ruff.changes
+++ b/python-ruff.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Sep  2 14:04:47 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update vendor tarball to fix CVE-2025-58160 (bsc#1249011)
+
 -------------------------------------------------------------------
 Tue Jun 10 11:18:15 UTC 2025 - Dirk Müller <dmueller@suse.com>
 
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 91d646d..53599e5 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b4f5e0a013c1631923d2f9879b64598c06baf5e96542bd63694eb8681c8aadfb
-size 25469387
+oid sha256:ef6774e1b30615e1aba66f537dfea29e78743bab0b9a9fa4f5e2b8aa740b8f98
+size 27037682