suse-add-cves utility takes a series of patches either as arguments or
one per line on stdin with --from_stdin (-f) option and updates CVE
number metadata in the patches.

suse-get-maintainers utility takes either a kernel path, an upstream
commmit hash, a unified patch produced by git or a CVE number and
produces contacts for SUSE maintainers responsible for the relevant
code.