Add CVE-2019-1429{5,6}/upx-ucl

For the classification follow same strategy as done for the other
upx-ucl issues. The impact is very negligible and upstream will likely
dispute the whole as valid security imapcting issues. Mark those
exceptionally straight as unimportant.