[PATCH 0/4] Backport CVE fixes to 6.12.y