These are all security issues fixed in the upx-3.96-3.2 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "upx": "3.96-3.2" } ] }