diff --git a/user/openvpn/APKBUILD b/user/openvpn/APKBUILD
index 76b5b5c689360a3645612cd41a5a30f75b1f65f8..e34112fc3fb9325b1c361de7a2e02e17355f9065 100644
--- a/user/openvpn/APKBUILD
+++ b/user/openvpn/APKBUILD
@@ -2,7 +2,7 @@
 # Contributor: Natanael Copa <ncopa@alpinelinux.org>
 # Maintainer: Lee Starnes <lee@canned-death.us>
 pkgname=openvpn
-pkgver=2.4.8
+pkgver=2.4.9
 pkgrel=0
 pkgdesc="A robust, and highly configurable VPN (Virtual Private Network)"
 url="https://openvpn.net/"
@@ -19,6 +19,10 @@ source="https://swupdate.openvpn.net/community/releases/$pkgname-$pkgver.tar.gz
 	openvpn.down
 	"
 
+# secfixes:
+#   2.4.9-r0:
+#     - CVE-2020-11810
+
 build() {
 	./configure \
 		--build=$CBUILD \
@@ -59,7 +63,7 @@ pam() {
 		"$subpkgdir"/usr/lib/openvpn/plugins/
 }
 
-sha512sums="fd559b6fe2323624fce5511f142a005cf62b15cb6c98d29e1aac3785cede6aad53ae9ded46ae1757da79b17820263906d7f7fbc00ea159301c122dd8baabdfad  openvpn-2.4.8.tar.gz
+sha512sums="a05cbd6c73809f26cd1b68bd491ceb8fb4ddf2cde0407f73f4c16d97477a4853722a1618e6dcf0b111283f73d9499b593b25107bb1441d9b38c80e76d6bcc69b  openvpn-2.4.9.tar.gz
 3594937d4cc9d7b87ac6a3af433f651ed9695f41586994f9d9789554fbe3f87f054b997b89486eda4ae0b852d816aac9007222168d585910aa9f255073324bd9  openvpn.initd
 6b2353aca9df7f43044e4e37990491b4ba077e259ebe13b8f2eb43e35ca7a617c1a65c5bfb8ab05e87cf12c4444184ae064f01f9abbb3c023dbbc07ff3f9c84e  openvpn.confd
 cdb73c9a5b1eb56e9cbd29955d94297ce5a87079419cd626d6a0b6680d88cbf310735a53f794886df02030b687eaea553c7c569a8ea1282a149441add1c65760  openvpn.up