Merge branch 'security' into 3.1-stable