diff --git a/cargo-audit.changes b/cargo-audit.changes
index 6cc11a0..9906b01 100644
--- a/cargo-audit.changes
+++ b/cargo-audit.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Jan  4 02:03:56 UTC 2024 - William Brown <william.brown@suse.com>
+
+- bsc#1218227 - update vendored dependencies for ssh terrapin attack
+
 -------------------------------------------------------------------
 Fri Oct 27 03:17:26 UTC 2023 - william.brown@suse.com
 
diff --git a/cargo-audit.spec b/cargo-audit.spec
index b3fc63a..8059a18 100644
--- a/cargo-audit.spec
+++ b/cargo-audit.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package cargo-audit
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 286d3ba..3708ff8 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ccaa6f850c29638d559fee370017f5b9422f2e2549602eca0426ec3ff78a8333
-size 40885456
+oid sha256:3c396d86d89e7284c32a580d2c371be2edd8237c1ac9044b5486d84e54983dbe
+size 44596395