SECURITY UPDATE: unbounded growth of the asynchronous RBT cache-cleanup
queue lets max-cache-size be exceeded
debian/patches/CVE-2023-6516.patch: limit isc_task_send() overhead
for tree pruning (upstream c3377cbfaa).
debian/patches/CVE-2023-6516-lock-contention.patch: reduce lock
contention during RBTDB tree pruning (upstream 801e888d03).
debian/patches/CVE-2023-6516-prune-guards.patch: guard re-queueing a
node for pruning (upstream f6289ad931, 4b6fc97af6, 7d9be24bb1).
debian/patches/CVE-2023-6516-final-design.patch: the design upstream
settled on in 9.16.49, GL #4621 (upstream a548312191, eba7fb5f9f,
5f98eba608). Drops the prunenodes lists, so dns_rbtnode is
unchanged and MAPAPI stays at 1.0.