Update releases and vulnerabilities for Play 2.2.6 release

Don't merge yet—I still need to smoke test the release and write the release notes.