Gentoo Linux Security Advisory GLSA 200507-13 – Rob Holland of the Gentoo Security Audit Team discovered that pam_ldap and nss_ldap fail to use TLS for referred connections if they are referred to a master after connecting to a slave, regardless of the ssl start_tls ldap.conf setting. Versions less than 239-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38707/glsa-200507-13.txt
Source: https://packetstormsecurity.com/files/38707/Gentoo-Linux-Security-Advisory-200507-13.html