diff --git a/srcpkgs/vsftpd/patches/008-allow-getrandom.patch b/srcpkgs/vsftpd/patches/008-allow-getrandom.patch
new file mode 100644
index 00000000000..566f30e14cb
--- /dev/null
+++ b/srcpkgs/vsftpd/patches/008-allow-getrandom.patch
@@ -0,0 +1,12 @@
+--- seccompsandbox.c.orig
++++ seccompsandbox.c
+@@ -286,6 +286,9 @@
+ static void
+ seccomp_sandbox_setup_base()
+ {
++  /* allow getrandom. */
++  allow_nr(__NR_getrandom);
++
+   /* Simple reads and writes on existing descriptors. */
+   allow_nr(__NR_read);
+   allow_nr(__NR_write);
diff --git a/srcpkgs/vsftpd/template b/srcpkgs/vsftpd/template
index e51bbd97fe8..71a15babe68 100644
--- a/srcpkgs/vsftpd/template
+++ b/srcpkgs/vsftpd/template
@@ -1,7 +1,7 @@
 # Template file for 'vsftpd'
 pkgname=vsftpd
 version=3.0.3
-revision=5
+revision=6
 build_style=gnu-makefile
 makedepends="pam-devel libcap-devel libressl-devel"
 short_desc="FTP deamon with focus on security"