DoDs:

• Check that all fixed CVEs were added to Errata (to the CVE Names section and to the Description (under Security Fix(es) paragraph))
  The fixed CVEs Jira tickets can be found in the CVE Tracker or when you list all issues with the specific target/fix version. (see release process document)
• Verify that CVE mapping is right

Links:

• OSSM 2.X Release Process - CVEs
• OSSM Errata Process