USN-152-1: PAM/NSS LDAP vulnerabilitiy

Andrea Barisani discovered a flaw in the SSL handling of pam-ldap and libnss-ldap. When a client connected to a consumer LDAP server using SSL, the consumer server did not use SSL as well when contacting the LDAP provider server. This caused passwords and other confident information to be...