ADSL-BC

In May/June 2017 Guido Vranken threw a fuzzer at OpenVPN 2.4.2. In the process he found several vulnerabilities and reported them to the OpenVPN project. The OpenVPN Git branches were patches as follows:

master: 7 patches
release/2.4: 7 patches
release/2.3: 5 patches (no mbedtls patches)
release/2.2: 1 patch (only the NTLM patch)
The first releases to have these fixes are OpenVPN 2.4.3 and 2.3.17. These releases also include a bunch of fixes not related to Guido's findings.