Centos Linux: CVE-2022-24407: Important: cyrus-sasl security update (Multiple Advisories)

Description
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.A flaw was found in the SQL plugin shipped with Cyrus SASL. Failure to properly escape the SQL input allows a remote attacker to execute arbitrary SQL commands. This issue can lead to the escalation of privileges.
Solution(s)
centos-upgrade-cyrus-sasl
centos-upgrade-cyrus-sasl-debuginfo
centos-upgrade-cyrus-sasl-debugsource
centos-upgrade-cyrus-sasl-devel
centos-upgrade-cyrus-sasl-devel-debuginfo
centos-upgrade-cyrus-sasl-gs2
centos-upgrade-cyrus-sasl-gs2-debuginfo
centos-upgrade-cyrus-sasl-gssapi
centos-upgrade-cyrus-sasl-gssapi-debuginfo
centos-upgrade-cyrus-sasl-ldap
centos-upgrade-cyrus-sasl-ldap-debuginfo
centos-upgrade-cyrus-sasl-lib
centos-upgrade-cyrus-sasl-lib-debuginfo
centos-upgrade-cyrus-sasl-md5
centos-upgrade-cyrus-sasl-md5-debuginfo
centos-upgrade-cyrus-sasl-ntlm
centos-upgrade-cyrus-sasl-ntlm-debuginfo
centos-upgrade-cyrus-sasl-plain
centos-upgrade-cyrus-sasl-plain-debuginfo
centos-upgrade-cyrus-sasl-scram
centos-upgrade-cyrus-sasl-scram-debuginfo
centos-upgrade-cyrus-sasl-sql
centos-upgrade-cyrus-sasl-sql-debuginfo

References
CESA-2022:0658
CESA-2022:0666
CVE-2022-24407