diff --git a/python-cryptography.spec b/python-cryptography.spec
index 6c110c5..bfd079f 100644
--- a/python-cryptography.spec
+++ b/python-cryptography.spec
@@ -7,7 +7,7 @@
 
 Name:           python-%{srcname}
 Version:        3.4.7
-Release:        7%{?dist}
+Release:        8%{?dist}
 Summary:        PyCA's cryptography library
 
 License:        ASL 2.0 or BSD
@@ -112,9 +112,11 @@ cat < %{SOURCE2} >> tests/conftest.py
 
 # see https://github.com/pyca/cryptography/issues/4885 and
 # see https://bugzilla.redhat.com/show_bug.cgi?id=1761194 for deselected tests
+# see rhbz#2042413 for memleak. It's unstable with openssl 3.0.1 and makes
+# not much sense for downstream testing.
 PYTHONPATH=${PWD}/vectors:%{buildroot}%{python3_sitearch} \
     %{__python3} -m pytest \
-    -k "not (test_buffer_protocol_alternate_modes or test_dh_parameters_supported or test_load_ecdsa_no_named_curve)"
+    -k "not (test_buffer_protocol_alternate_modes or test_dh_parameters_supported or test_load_ecdsa_no_named_curve or test_openssl_memleak)"
 %endif
 
 %files -n python%{python3_pkgversion}-%{srcname}
@@ -124,6 +126,10 @@ PYTHONPATH=${PWD}/vectors:%{buildroot}%{python3_sitearch} \
 %{python3_sitearch}/%{srcname}-%{version}-py*.egg-info
 
 %changelog
+* Tue Feb 08 2022 Tomas Orsava <torsava@redhat.com> - 3.4.7-8
+- Skip unstable memleak tests, backported from Fedora (BZ#2042413)
+- Related: rhbz#1990421
+
 * Tue Feb 08 2022 Tomas Orsava <torsava@redhat.com> - 3.4.7-7
 - Add automatically generated Obsoletes tag with the python39- prefix
   for smoother upgrade from RHEL8