Those interested in patching their local machines, while 2.4.28 is being buttoned-up, review the following link: http://svn.apache.org/viewvc?view=revision&revision=1807754