Debian issued a security update too:

  rsync (3.2.7-1+deb12u1) bookworm-security; urgency=high