These are all security issues fixed in the libpano-devel-2.9.20-1.3 package on the GA media of openSUSE Tumbleweed.