GNU SASL gsasl 2.2.3 released with a security fix
lists.gnu.org