GHSA-jr95-x3fr-rcg4: add affected RubyGems ranges for resolv

[brianmcarey]

GHSA-jr95-x3fr-rcg4 (CVE-2026-80213) has an empty affected array, so the advisory carries no package or version information and cannot be matched against pkg:gem/resolv. The record already has accurate details, severity and CWE; this only adds the affected ranges.

The ranges come from the upstream Ruby advisory, which lists the affected versions as "resolv gem 0.4.0 through 0.7.1" and "resolv gem 0.3.1 and earlier", fixed in 0.7.2 with a 0.3.2 backport for the 0.3.x line used by the Ruby 3.3 series. No release is planned for the 0.2.x line shipped by the end-of-life Ruby 3.2 series, so 0 to 0.3.2 covers it.

This matches the shape already used for the earlier resolv advisory GHSA-xh69-987w-hrp8, and the same ranges are recorded in rubysec/ruby-advisory-db.

References:

• https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resolv/CVE-2026-80213.yml
• https://github.com/ruby/resolv/releases/tag/v0.7.2
• https://github.com/ruby/resolv/releases/tag/v0.3.2