These are all security issues fixed in the liborc-0_4-0-0.4.39-1.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "liborc-0_4-0": "0.4.39-1.1", "orc": "0.4.39-1.1", "liborc-0_4-0-32bit": "0.4.39-1.1", "orc-doc": "0.4.39-1.1" } ] }