diff --git a/openvpn-2.6.8.tar.gz b/openvpn-2.6.8.tar.gz
deleted file mode 100644
index 04b9e1b3c7d411eb5e85260929740f7e7ef2efd0..0000000000000000000000000000000000000000
Binary files a/openvpn-2.6.8.tar.gz and /dev/null differ
diff --git a/openvpn-2.6.9.tar.gz b/openvpn-2.6.9.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..00d8fa0d3d8df273fed758148368b20747a38226
Binary files /dev/null and b/openvpn-2.6.9.tar.gz differ
diff --git a/openvpn.spec b/openvpn.spec
index b406940be4bacfa00273c30ca9edda2c318add87..10df78e9eb8f154d74a4a415788b361b5d6d079c 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -1,5 +1,5 @@
 Name: openvpn
-Version: 2.6.8
+Version: 2.6.9
 Release: 1
 Summary: A full-featured open source SSL VPN solution
 License: GPL-2.0-or-later and OpenSSL and SSLeay
@@ -9,7 +9,7 @@ Patch0:  openvpn-2.4-change-tmpfiles-permissions.patch
 BuildRequires: openssl-devel lz4-devel systemd-devel lzo-devel gcc
 BuildRequires: iproute pam-devel pkcs11-helper-devel >= 1.11
 BuildRequires: libselinux-devel
-BuildRequires:     libcap-ng-devel
+BuildRequires: libcap-ng-devel
 
 Requires: iproute
 Requires(pre): /usr/sbin/useradd
@@ -124,6 +124,9 @@ fi
 %{_mandir}/man5/openvpn-examples.5.gz
 
 %changelog
+* Thu Feb 22 2024 yaoxin <yao_xin001@hoperun.com> - 2.6.9-1
+- Upgrade to 2.6.9 for fix CVE-2023-7235
+
 * Mon Jan 08 2024 Ge Wang <wang__ge@126.com> - 2.6.8-1
 - Update to version 2.6.8