SECURITY UPDATE: out-of-bounds pool access in mod_dav If: header parsing
debian/patches/CVE-2006-20001.patch: confine the two-byte cursor advance
to the "Not" branch and reject any other 'N'-prefixed token with
HTTP 400 in dav_process_if_header() in modules/dav/main/util.c.