ftpd has received a fairly significant security fix and updating it to the latest version on the master or release branch is recommended if you use.
That said, nobody should really be using either ftpd or telnetd any more these days, neither is turned on by default, and we are contemplating removing both from base entirely. -Matt
