diff --git a/python-ruff.changes b/python-ruff.changes
index 62392b6..1c43548 100644
--- a/python-ruff.changes
+++ b/python-ruff.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Sep  2 14:04:47 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update vendor tarball to fix CVE-2025-58160 (bsc#1249011)
+
 -------------------------------------------------------------------
 Thu Aug 28 21:53:00 UTC 2025 - Ondřej Súkup <mimi.vx@gmail.com>
 
diff --git a/python-ruff.spec b/python-ruff.spec
index ce7b3c8..def679f 100644
--- a/python-ruff.spec
+++ b/python-ruff.spec
@@ -1,7 +1,6 @@
 #
 # spec file for package python-ruff
 #
-# Copyright (c) 2025 SUSE LLC
 # Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
diff --git a/vendor.tar.zst b/vendor.tar.zst
index d9ba217..be0e390 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d38daa5de2a633ad721d90cf0d2d4ea7e945c9be4e39ce13eb2db05506ee49e7
-size 30009436
+oid sha256:8132f6de87965337ae7a6055e3b1873cd89c99ad4be3d3a2cc34779473a3e7e9
+size 27523163