diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index c03608361..f0cf8079f 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -4,7 +4,7 @@ Changelog
 Versions are year-based with a strict backward-compatibility policy.
 The third digit is only for regressions.
 
-23.2.0 (UNRELEASED)
+23.2.0 (2023-05-30)
 -------------------
 
 Backward-incompatible changes:
@@ -19,6 +19,7 @@ Deprecations:
 Changes:
 ^^^^^^^^
 
+- ``cryptography`` maximum version has been increased to 41.0.x.
 - Invalid versions are now rejected in ``OpenSSL.crypto.X509Req.set_version``.
 - Added ``X509VerificationCodes`` to ``OpenSSL.SSL``.
   `#1202 <https://github.com/pyca/pyopenssl/pull/1202>`_.
diff --git a/setup.py b/setup.py
index d548ccde3..bcaffe9da 100644
--- a/setup.py
+++ b/setup.py
@@ -99,7 +99,7 @@ def find_meta(meta):
         install_requires=[
             # Fix cryptographyMinimum in tox.ini when changing this!
             # 40.0.0 and .1 are missing X509_V_* constants that we re-export.
-            "cryptography>=38.0.0,<41,!=40.0.0,!=40.0.1",
+            "cryptography>=38.0.0,<42,!=40.0.0,!=40.0.1",
         ],
         extras_require={
             "test": ["flaky", "pretend", "pytest>=3.0.1"],
diff --git a/src/OpenSSL/version.py b/src/OpenSSL/version.py
index 60c945cfd..f1e941e52 100644
--- a/src/OpenSSL/version.py
+++ b/src/OpenSSL/version.py
@@ -17,7 +17,7 @@
     "__version__",
 ]
 
-__version__ = "23.2.0.dev"
+__version__ = "23.2.0"
 
 __title__ = "pyOpenSSL"
 __uri__ = "https://pyopenssl.org/"