Due to the jackson CVE, and also, there is a critical bug fix HBASE-22539. I can take care of 2.1.6, and Guanghao Zhang is the release manager for 2.2.x, Stack is the release manager for 2.0.x, so by default they should take care of the new releases.
Shout if you do not have enough time to make a release, then we can find other volunteers to make the new releases. Thanks.
