Hotfix for 2.2

This is a security release, upgrade is highly recommended.

Vulnerabilities were discovered by security researcher Robin Descamps from NTT Belgium, a big thank to him for following our responsible disclosure policy.
CVEs are on their way.

Change log

You can find a summary of the change log here.