It's unclear to me if I only ever rsync over SSH, whether I would be vulnerable: would rsyncd be started and exposed for the duration of the transfer (though on an unprivileged arbitrary port)?<p>(Obviously, going to upgrade asap, but simply curious)