These are all security issues fixed in the apr-devel-1.7.0-2.2 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "apr-devel": "1.7.0-2.2", "libapr1": "1.7.0-2.2" } ] }