Add Frederik Braun as the reporter for CVE-2013-4409.

This was, unfortunately, missing from our release notes. I've added him
and given credit for finding and fixing the problem.
Merge branch 'release-1.7.x'