diff --git a/_service b/_service
index 9d5063a..28fd155 100644
--- a/_service
+++ b/_service
@@ -1,7 +1,7 @@
 <services>
   <service name="download_files" mode="disabled"/>
   <service name="cargo_vendor" mode="disabled">
-    <param name="srcdir">cryptography-40.0.2/src/rust</param>
+    <param name="srcdir">cryptography-41.0.1/src/rust</param>
     <param name="compression">zst</param>
   </service>
   <service name="cargo_audit" mode="disabled">
diff --git a/cryptography-40.0.2.tar.gz b/cryptography-40.0.2.tar.gz
deleted file mode 100644
index 577e526..0000000
--- a/cryptography-40.0.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c33c0d32b8594fa647d2e01dbccc303478e16fdd7cf98652d5b3ed11aa5e5c99
-size 625561
diff --git a/cryptography-41.0.1.tar.gz b/cryptography-41.0.1.tar.gz
new file mode 100644
index 0000000..633feec
--- /dev/null
+++ b/cryptography-41.0.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d34579085401d3f49762d2f7d6634d6b6c2ae1242202e860f4d26b046e3a1006
+size 629124
diff --git a/python-cryptography.changes b/python-cryptography.changes
index 63700c0..79156f3 100644
--- a/python-cryptography.changes
+++ b/python-cryptography.changes
@@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Mon Jun 19 20:41:45 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 41.0.1 (bsc#1212568):
+  * Temporarily allow invalid ECDSA signature algorithm
+    parameters in X.509 certificates, which are 
+    generated by older versions of Java.
+  * Allow null bytes in pass phrases when serializing private
+    keys.
+  * **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than
+    1.1.1d has been removed.  Users on older version of
+    OpenSSL will need to upgrade.
+  * **BACKWARDS INCOMPATIBLE:** Support for Python 3.6 has been
+    removed.
+  * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL <
+    3.6.
+  * Updated the minimum supported Rust version (MSRV) to 1.56.0,
+    from 1.48.0.
+  * Added support for the
+    :class:`~cryptography.x509.OCSPAcceptableResponses`
+    OCSP extension.
+  * Added support for the
+    :class:`~cryptography.x509.MSCertificateTemplate`
+    proprietary Microsoft certificate extension.
+  * Implemented support for equality checks on all asymmetric
+    public key types.
+  * Added support for ``aes256-gcm@openssh.com`` encrypted keys
+    in :func:`~cryptography.hazmat.primitives.serialization.load_ssh
+    _private_key`.
+  * Added support for obtaining X.509 certificate signature
+    algorithm parameters (including PSS)
+
 -------------------------------------------------------------------
 Fri Apr 21 12:23:51 UTC 2023 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-cryptography.spec b/python-cryptography.spec
index 5902a8d..e034e88 100644
--- a/python-cryptography.spec
+++ b/python-cryptography.spec
@@ -16,8 +16,6 @@
 #
 
 
-%{?!python_module:%define python_module() python3-%{**}}
-%define skip_python2 1
 %global rustflags '-Clink-arg=-Wl,-z,relro,-z,now'
 %global flavor @BUILD_FLAVOR@%{nil}
 %if "%{flavor}" == "test"
@@ -29,7 +27,7 @@
 %endif
 %{?sle15_python_module_pythons}
 Name:           python-cryptography%{psuffix}
-Version:        40.0.2
+Version:        41.0.1
 Release:        0
 Summary:        Python library which exposes cryptographic recipes and primitives
 License:        Apache-2.0 OR BSD-3-Clause
@@ -50,12 +48,12 @@ BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module exceptiongroup}
 BuildRequires:  %{python_module setuptools-rust}
 BuildRequires:  %{python_module setuptools}
-BuildRequires:  cargo >= 1.41.0
+BuildRequires:  cargo >= 1.56.0
 BuildRequires:  fdupes
 BuildRequires:  libopenssl-devel
 BuildRequires:  pkgconfig
 BuildRequires:  python-rpm-macros
-BuildRequires:  rust >= 1.41.0
+BuildRequires:  rust >= 1.56.0
 BuildRequires:  zstd
 BuildRequires:  pkgconfig(libffi)
 # python-base is not enough, we need the _ssl module
@@ -93,6 +91,8 @@ cp %{SOURCE3} .cargo/config
 rm -v src/rust/Cargo.lock
 
 %build
+# https://github.com/pyca/cryptography/issues/9023
+%global _lto_cflags %{nil}
 export RUSTFLAGS=%{rustflags}
 export CFLAGS="%{optflags} -fno-strict-aliasing"
 %python_build
diff --git a/vendor.tar.zst b/vendor.tar.zst
index db109c2..fb9f6c1 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:4b0ef00d9d0033f25e1b6fed58ef8beccbba24b03cd5db5a67c84410a954c06b
-size 22655308
+oid sha256:db2566256b8e495a97af1192916c64e758d5f1a52ed3870ac36701193f56ce9e
+size 6149053