Insufficient validation in the HTTP remote backend

Origin: upstream, https://downloads.powerdns.com/patches/2019-03/CVE-2019-3871-auth-4.1.6.patch
Bug: https://github.com/PowerDNS/pdns/issues/7573
Bug-Debian: https://bugs.debian.org/924966
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-3871
Forwarded: not-needed
Reviewed-by: Salvatore Bonaccorso <carnil@debian.org>
Last-Update: 2019-03-29
Applied-Upstream: 4.1.7

Gbp-Pq: Name CVE-2019-3871-auth-4.1.6.patch

pdns (4.1.6-3+deb10u1) buster; urgency=medium

  * Apply upstream patches to fix CVE-2019-10203.
    To actually fix this problem in existing installations, the newly
    supplied schema file 4.1.10_to_4.1.11.schema.pgsql.sql has to be
    manually applied to the backing PostgreSQL database. (Closes: #970729)
  * Apply upstream patches to fix CVE-2020-17482 (Closes: #970737)

[dgit import unpatched pdns 4.1.6-3+deb10u1]

Import pdns_4.1.6-3+deb10u1.debian.tar.xz

[dgit import tarball pdns 4.1.6-3+deb10u1 pdns_4.1.6-3+deb10u1.debian.tar.xz]

Import pdns_4.1.6.orig.tar.bz2

[dgit import orig pdns_4.1.6.orig.tar.bz2]