[security] Upgrade to 1.6.22. Fixes CVE-2014-3532 and CVE-2014-3533.