- RPATH changed to TARGETURI
- both CVE numbers referenced
- sightly changed exception handling