These are all security issues fixed in the cyrus-sasl-2.1.28-1.1 package on the GA media of openSUSE Tumbleweed.