* SECURITY UPDATE: resolv memory exhaustion via unknown DNS resource types and SvcParamKeys - debian/patches/CVE-2026-80212.patch: stop permanently registering generated Resource::Generic and SvcParam::Generic classes (as Type_Class / Key constants and, in the RubyGems-vendored copy, as Resource::ClassHash entries) for every unknown DNS (type, class) pair and SvcParamKey, and compare generic records by TypeValue/ClassValue instead of class identity; backport of upstream ruby/resolv 6393c62 (resolv 0.7.2; 23f0009 on the 0.3 branch) - Behaviour change inherited from upstream: a class obtained from Resource::Generic.create(type, class) is no longer registered, so Resolv::DNS#getresources(name, Generic.create(type, class)) now returns an empty list where it used to return the matching records; records of unknown types are still decoded as Resource::Generic - CVE-2026-80212 * SECURITY UPDATE: resolv hostname validation bypass via unchecked DNS name limits - debian/patches/CVE-2026-80213.patch: enforce the 63-octet label and 255-octet encoded-name limits when encoding, cap character-strings at 255 octets and report out-of-range length octets as DecodeError, so an over-long label can no longer wrap its length octet and resolve a different name; backport of upstream ruby/resolv b336e42 (resolv 0.7.2; b0ddbb5 on the 0.3 branch) - CVE-2026-80213