Right now there's no check in patchtest to see if the CVE ID is in the filename of the patch that fixes it. This should be added as a test, so that we can increase the number of patch files that are obviously intended to handle CVEs.