Rsync 3.5 is now available with 33 security fixes, including a critical vulnerability, plus extensive hardening across daemon and path handling.