Errata patches for ftp have been released for OpenBSD 6.5 and 6.6. ftp(1) will follow remote redirects to local files.
Binary updates for the amd64, i386, and arm64 platforms are available via the syspatch utility. Source code patches can be found on the respective errata page: https://www.openbsd.org/errata65.html https://www.openbsd.org/errata66.html