Just upgraded to ver 20.1.4 of OpnSense. Security audit shows vulnerablity in openvpn, CVE-2020-11810 but a 'Check for updates' does not offer 2.4.9 which appears to be the fixed release. Is an OpnSense 20.1.5 in the offing as soon as?
We're basically always working on the next release behind the scenes... rest assured that 20.1.5 will pick this up. Not sooner, not later.
Cheers,
Franco