[worik]

> Just pin rsync's version

Very bad advice these days.

[newtonsmethod]

There's a comment on the GitHub thread which also mentions pinning rsync version would be a bad idea. Many of the people affected by reversions are those with workflows vulnerable to the prior CVEs.