Add Frederik Braun as the reporter for CVE-2013-4409.

This was, unfortunately, missing from our release notes. I've added him
and given credit for finding and fixing the problem.