ucommon is currently using a vulnerable version for the openssl variant
It's needed for the twinkle package

Building it with the latest openssl version causes a build error.
It would propably need to be patched.