advisory-db Add notices for `trust-dns`

Resolves: #1804.

Oct 18 '23 02:10 thomaseizinger

I'm not sure I agree completely with this. We're discussing in the hickory-dns repos (formerly trust-dns), I'd like to come to a consensus there before publishing an advisory like this.

Oct 18 '23 03:10 bluejekyll

Also, maybe add this issue as a reference? hickory-dns/hickory-dns#2051

I'll add it once there is consensus that these will be published :)

Oct 19 '23 03:10 thomaseizinger

This looks good to me, and I agree with the filing. Thank you for working with us at the project to come to a decent resolution on this @thomaseizinger, I really appreciate your time and effort on this.

You are welcome, thank you for collaborating on it! :)

Oct 25 '23 21:10 thomaseizinger

Multi-crate projects have been typically dealt by adding an advisory around a root crate lightning up all downstream.

It seems trust-dns-proto is dependency of trust-dns-server, trust-dns-client, trust-dns-resolver, trust-dns

For precedent see. git/gix rename via PR/1644 and rusoto via PR/1494

Also given the old crates will not be maintained (assuming here) these have gone past as unmaintained type.

Dec 06 '23 19:12 pinkforest

I don't mind either way, happy to remove all but trust-dns-proto!

Dec 06 '23 21:12 thomaseizinger