ZA also has released 2 critical security updates which still are valid for the 4.x pro (only?) version also! Automatic update revealed them when I was at customers place a little earlier tonight.