use lateset version. prior versions contain uucp{un,}lock() which uses
sprintf() in insecure manner (may subject to buffer overflow, like xmindpath
in magicpoint).

If you really care, I can mark them BROKEN until they are confirmed to be safe.