* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and the Resource constants written through Resource::ClassHash) for every unknown DNS (type, class) pair, and the generated SvcParam::Generic classes for every unknown SvcParamKey, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 6393c62 (resolv 0.7.2, == 23f0009 on the 0.3 branch) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b336e42 (resolv 0.7.2, == b0ddbb5 on the 0.3 branch) - CVE-2026-80213