Source: upx-ucl
Version: 3.93-1
Severity: serious
Justification: Policy ยง4.13
Control: found -1 3.94-2

Apparently upx-ucl reverted from using the system LZMA library
to its own. This, if not justified, is a Policy violation, for
various reasons, including maintainability and security.

Neither the changelog entry nor README.{Debian,source} contain
any justification, however.

Reply via email to