Major rsync upgrade in Debian because of 33 CVEs
Summary
Debian patched rsync by upgrading to 3.5.0 to fix 33 CVEs, with changes to symlink handling and rsyncd/SSL behavior. The update emphasizes lower risk than backporting patches and may affect existing configurations; users should review release notes and test prior to deployment.