Add advisory for domain: Dnskey::parse bypass the 16-bit RDATA length invariant

[yilin0518]

Affected crate(s)

• domain (1,338,549 downloads on crates.io)

Links to upstream issue(s) or PR(s)

• Dnskey::parse bypasses 16-bit RDATA length invariant via new_unchecked NLnetLabs/domain#621

Severity

Soundness issue: safe parsing bypasses the DNSKEY RDATA 16-bit length invariant, allowing construction of invalid records and violating new_unchecked safety preconditions, which can undermine memory safety assumptions.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

The mentioned issue is open for more than two months and no response has been received so far.

[djc]

Closing this per upstream discussion; seems low-risk and low-impact.