ZA also has released 2 critical security updates which still are valid for the 4.x pro (only?) version also!
Automatic update revealed them when I was at customers place a little earlier tonight.