CVE Numbers for security audit

Hi, I am currently trying to do a security audit on our software for the (DIACAP)DoD Information Assurance Certification and Accreditation Process. I have been tracing the CVE numbers for PHP 4.x to the security advisories given out by the engineers over at Mandriva Linux and have been able to do so without too many problems. But I am hoping you could tell me what specific PHP version upgrades go with which CVE numbers. The changelog for PHP 4 only shows two CVE numbers for PHP version 4.4.7 and thats it. I need to be able to show all the updates to each PHP version update supported by the CVE numbers. If you could get back with me or have one of your engineers contact me and help me with this problem, that would be greatly appreciated. -- Michael B. Stogsdill Software Engineer Sycamore.US