In May/June 2017 Guido Vranken threw a fuzzer at OpenVPN 2.4.2. In the process he found several vulnerabilities and reported them to the OpenVPN project. The OpenVPN Git branches were patches as follows:

https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243