Have a look at this comment:
If it would help, we can prepare a git branch with the patch applied.
I'm curious, can you be more specific about what's holding you back from moving from RF 4.2 to 4.3? Maybe that's something we can overcome and you can use the latest jar with the security patch applied.
Thanks I have patched 4.2 with this
and it seems to work flawlessly.