These are all security issues fixed in the libebml-devel-1.4.2-2.3 package on the GA media of openSUSE Tumbleweed.