Add unmaintained advisory for rustybuzz

[sww1235]

Affected crate(s)

• rustybuzz (8,103,992 recent downloads (90 days))

Links to upstream issue(s) or PR(s)

• Moving away from ttf-parser harfbuzz/rustybuzz#166 (the maintainer states the crate is unmaintained/abandoned).

Severity

Informational. The crate's author has stated on the referenced issue that rustybuzz is unmaintained and will not be updated. Recommended alternative: harfrust, an actively maintained Harfbuzz port owned and maintained by the Harfbuzz owners.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

[sww1235]

related to #3011

[djc]

Thanks!