vsftpd upgrade in precise

Is there a PPA?

If you report a bug stating the security and bug fixes, the version in the repos may get updated.

What is the output of:

lsb_release -a; uname -a

Thanks

sudo add-apt-repository ppa:guilhem-fr/vsftpd-daily
sudo apt-get update
sudo apt-get install vsftpd

Use at your own risk
https://launchpad.net/~guilhem-fr/+archive/vsftpd-daily

Hi there:

This is not a bug, but actually a compile + publish request.

Let me explain myself:

If you see the original software changelog: https://security.appspot.com/vsftpd/Changelog.txt, the following check was added in 2.3.5:
- Add stronger checks for the configuration error of running with a writeable
root directory inside a chroot(). This may bite people who carelessly turned
on chroot_local_user but such is life.

This provokes that if a writeable root for a chroot exists, it will fail to log in with this message:

    500 OOPS: vsftpd: refusing to run with writable root inside chroot ()

If you look further in 3.0 version a key config for vsftpd.conf has been included that allows to set a writeable chroot:

    500 OOPS: vsftpd: refusing to run with writable root inside chroot ()

This is the situation up to now in precise and quantal (raring and saucy already include this 3.0 version) in both i386 and amd64.

So this request is asking the package mantainer about the possibility of upgrading the precompiled package from 2.3.5 to 3.0 in precise distribution)

Thanks a lot

The PPA I gave will update the version for you. I suggest you run:

ubuntu-bug vsftpd

And ad that text in your last update to the bug

Thanks , I'll do the latter as I need to keep with official packages.

Regards