Astra Linux – vulnerability in cyrus-sasl2

In Cyrus SASL versions 2.1.17 through 2.1.27 up to and including 2.1.28, the plugin/sql.c file fails to escape the password used in SQL INSERT or UPDATE statements...