#rsync : https://security.archlinux.org/AVG-1374
The package rsync before version 3.2.3-2 is vulnerable to man-in-the-
middle.
#dovecot : https://security.archlinux.org/AVG-1398
The package dovecot before version 2.3.13-1 is vulnerable to multiple
issues including information disclosure and denial of service.