Rsync 3.5.0: a huge number of security fixes

Write your take first — we'll ask for email only when you're ready to publish.