Only the current release of the software is actively supported. If you need help backporting fixes into an older release, feel free to ask.

Email your vulnerability information to rsync's maintainer:

Rsync Project rsync.project@gmail.com