CVE request: VLC / Asterisk

[Moritz Muehlenhoff <jmm () debian org>]

Hi,

Please assign CVE IDs:

1. heap-based buffer overflow in VLC's Ogg demuxer
Fixed in the VLC 2.0.2 release

Commit:
http://git.videolan.org/?p=vlc/vlc-2.0.git;a=commitdiff;h=16e9e126333fb7acb47d363366fee3deadc8331e

2. asterisk: Possible resource leak on uncompleted re-invite transactions
http://downloads.asterisk.org/pub/security/AST-2012-010.html

Cheers,
        Moritz