Ubuntu Security Notice 1288-1 - It was discovered that the 2.6.35 and earlier Linux kernel does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) in applications that require a separate namespace per connection, like vsftpd. This update adjusts vsftpd to only use network namespaces on kernels that are known to be not affected.
b6fa8f8d04a036dd6872e1f5e1d5f95c59df9f7d97a38bfac368ad75d2547cc4
Debian Linux Security Advisory 2305-1 - Two security issue have been discovered that affect vsftpd, a lightweight, efficient FTP server written for security.
d1013c9209e9503db4e32189f1ad82768a403b81814dbf62efc924b7a59799f6