diff --git a/changelogs/fragments/cffi-constraint.yml b/changelogs/fragments/cffi-constraint.yml
new file mode 100644
index 00000000000..105d29fcbc7
--- /dev/null
+++ b/changelogs/fragments/cffi-constraint.yml
@@ -0,0 +1,4 @@
+bugfixes:
+  - >
+    ansible-test - add constraint for ``cffi`` to prevent failure on systems with
+    older versions of ``gcc`` (https://foss.heptapod.net/pypy/cffi/-/issues/480)
diff --git a/test/lib/ansible_test/_data/cryptography-constraints.txt b/test/lib/ansible_test/_data/cryptography-constraints.txt
index 3ea40ba116d..b057c83f9f2 100644
--- a/test/lib/ansible_test/_data/cryptography-constraints.txt
+++ b/test/lib/ansible_test/_data/cryptography-constraints.txt
@@ -1 +1,2 @@
 idna < 2.8 ; python_version < '2.7' # idna 2.8+ requires python 2.7+
+cffi != 1.14.4 # Fails on systems with older gcc. Should be fixed in the next release. https://foss.heptapod.net/pypy/cffi/-/issues/480