Thanks for the response. Any chance I could see your vsftpd.conf file and know what versions of openssl and libssl1.0.0 are installed? I ask because I was unable to reproduce.
I've pasted the results of my testssl.sh [1] and vsftpd.conf [2], and the versions of vsftpd, openssl, and libssl1.0.0 [3]. [1] https://paste.ubuntu.com/23863796/ [2] https://paste.ubuntu.com/23863798/ [3] https://paste.ubuntu.com/23863808/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1591552 Title: vsftpd vulnerable to heartbleed (according to testssl) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1591552/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs