When rebasing pure-ftpd in Fedora 26, 27 and Rawhide, a packaging error occurred due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration as well. This issue is Fedora-specific and affected Fedora 26, 27 and Rawhide. The affected downstream version is pure-ftpd-1.0.46-1.
Created pure-ftpd tracking bugs for this issue: Affects: fedora-all [bug 1493115]