diff --git a/.deny.toml b/.deny.toml
index c1dabe383..28af0204d 100644
--- a/.deny.toml
+++ b/.deny.toml
@@ -5,8 +5,8 @@
 db-path = "~/.cargo/advisory-db"
 db-urls = ["https://github.com/rustsec/advisory-db"]
 ignore = [
-  # gix only used by burn-train
-  "RUSTSEC-2024-0350",
+  # pyoxidizer is stuck on an old ring version
+  "RUSTSEC-2025-0009",
 ]
 
 [licenses]