Source: upx-ucl Version: 3.93-1 Severity: serious Justification: Policy ยง4.13 Control: found -1 3.94-2
Apparently upx-ucl reverted from using the system LZMA library to its own. This, if not justified, is a Policy violation, for various reasons, including maintainability and security. Neither the changelog entry nor README.{Debian,source} contain any justification, however.