Could you help upgrade the vulnerble shared library introduced by package pygroupsig?

[MikeWazoWski123]

Hi, @jdv-ibm , @jesusdiazvico , I'd like to report a vulnerability issue in pygroupsig_1.1.0.

Dependency Graph between Python and Shared Libraries

Issue Description

As shown in the above dependency graph (Here shows part of the dependency graph, which depends on vulnerable shared libraries), pygroupsig_1.1.0 directly or transitively depends on 3 C libraries (.so). However, I noticed that some C libraries are vulnerable, containing the following CVEs:
libcrypto-021c2f5b.so.1.1 and libssl-6db5df62.so.1.1from C project openssl(version:1.1.0g) exposed 7 vulnerabilities:
CVE-2019-1543, CVE-2018-0735, CVE-2017-3738, CVE-2020-7043, CVE-2020-7042, CVE-2020-7041, CVE-2019-1552,

Suggested Vulnerability Patch Versions

openssl has fixed the vulnerabilities in versions >=1.1.1c

Python build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Python projects.
As a popular python package (pygroupsig has 1,126 downloads per month), could you please upgrade the above shared libraries to their patch versions?

Thanks for your help~
Best regards,
MikeWazowski