[PATCH RFC 6.6.y 00/15] Some missing CVE fixes