All, we have just published the patch release 2.5.2 - see its release page for details!
In constrast to the original plan stated above, there is again a distro 2.5.2 available, although the distro itself is more or less identical to version 2.5.1 since all changes only concern the add-ons.
This also means that the 2.5.2 patches are directly available to any 2.5.1 distro installation as well without doing a distro update. If you install new add-ons - or you delete the cache and have add-ons reinstalled - the distro will pick the latest patch version of the add-on.
IMPORTANT NOTICE TO USERS OF THE EXEC BINDING:
Due to this security advisory, the exec binding requires to have a whitelist of allowed commands to execute. Note that when updating the exec binding to version 2.5.2, it will stop functioning until you provide such a whitelist. Please see the binding documentation for details and also check this post for a detailed how to.