Upgrading OSC to CSS to 2.3 is tedious but not much different than installing contributions. Here is a link to the official instructions:
Upgrade to 2.3
Note you can do as much or as little of an upgrade as you need. If you want to only upgrade the security aspects, the pick the items marked (SEC). Work top to bottom.