These are all security issues fixed in the cyrus-sasl-2.1.26-12.5 package on the GA media of openSUSE Tumbleweed.