Advisory for domain security release 0.12.3

[partim]

Affected crate(s)

• domain ( 1,390,646 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• https://github.com/NLnetLabs/domain/releases/tag/v0.12.3

The advisory is a single advisory for a number of issues fixed by the 0.12.3 release. The release notes link to the individual PRs.

Severity

The majority of issues are panics or CPU or memory exhaustion issues that can be triggered by incoming messages. There are also a small number of soundness issues.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

[djc]

Makes sense, thanks!