These are all security issues fixed in the bison-3.7.6-3.13 package on the GA media of openSUSE Tumbleweed.