Add second bug reference for CVE-2018-11243/upx-ucl

899190 part claimed to be fixed in 3.95-1 upload. The CVE-2018-11243
entry references to both the

https://github.com/upx/upx/issues/206 (#899190)
https://github.com/upx/upx/issues/207 (#907426)

entries.