Patch to Vulnerability Linkage

[Nathan McGarvey]

    Is there any linkage between bash patches and known CVE (or any 
other database) IDs? (Source-code comment, bug-tracker, etc.)
    I understand that there is not a one<->one relationship, but for 
the bug-fixes that do pertain to one or more vulnerability entry, it may 
be beneficial to outright state "this patch is designed to fix X".

-Nathan