* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic classes (Generic constants and Resource::ClassHash entries) for every unknown DNS (type, class) pair, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 23f0009 (resolv 0.3.2 / 0.7.2) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character- strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b0ddbb5 (resolv 0.3.2 / 0.7.2) - CVE-2026-80213 * ALTEAPLN-38: drop the alt-ruby26-rubygem-typeprof deb package. Ruby 2.6 does not bundle typeprof: the package was declared in debian/control but never populated or versioned, shipping only doc files stamped with the interpreter version, which fails the rubygem version QA checks. * ALTEAPLN-38: add the missing debian/@name@-rubygem-did-you-mean.changelog and debian/@name@-rubygem-openssl.changelog templates so both sub-packages are stamped with their gem version (did_you_mean_version, openssl_version) instead of the interpreter version. Both deb versions carry an epoch (1:) because the previously shipped interpreter-versioned debs (2.6.10-N) compare higher than the gem versions and apt would refuse the downgrade otherwise; the Conflicts and Provides constraints in debian/control follow the epoch.