I'm not sure but I believe OpenVPN use OpenSSL, so you might be interested by this news.
OpenSSL has squashed eight low severity vulnerabilities bugs that could result in denial of service or the removal of forward secrecy.
http://www.theregister.co.uk/2015/01/09/dead_openssl_bugs_more_fleas_than_poodles/
https://www.openssl.org/news/secadv_20150108.txt
