Please remove libui-dialog-perl; open security vulnerability

[Jeremy Bícha]

Please remove libui-dialog-perl and its reverse depends macchanger-gtk from Ubuntu 18.04.

libui-dialog-perl was removed from Debian Testing in November 2016 for a security bug originally reported in 2008. The bug was apparently fixed in 1.13 but no one cares for this package.

I mean it could be trivially NMU'd in Debian, but… its only reverse dependency is macchanger-gtk which was last uploaded in 2009.

macchanger-gtk is a simple perl gtk2 app with the source code partially written in Spanish. The app doesn't use great English and is not translated. The homepage listed in the Debian packaging no longer works. The program needs to be either run as root or with gksu (a Recommends) but that won't work with the Wayland session that Ubuntu will presumably default to in 18.10.

References
----------
https://tracker.debian.org/pkg/libui-dialog-perl
https://bugs.debian.org/496448
https://rt.cpan.org/Public/Bug/Display.html?id=107364

https://tracker.debian.org/pkg/macchanger-gtk
https://sources.debian.org/src/macchanger-gtk/unstable/

[Łukasz Zemczak (sil2100)]

No new package updates since precise + package removed in Debian, +1 on the removal.

$ remove-package -m "Removed in Debian, no maintenance; LP: #1765178" libui-dialog-perl macchanger-gtk
Removing packages from bionic:
 libui-dialog-perl 1.09-1 in bionic
  libui-dialog-perl 1.09-1 in bionic amd64
  libui-dialog-perl 1.09-1 in bionic arm64
  libui-dialog-perl 1.09-1 in bionic armhf
  libui-dialog-perl 1.09-1 in bionic i386
  libui-dialog-perl 1.09-1 in bionic ppc64el
  libui-dialog-perl 1.09-1 in bionic s390x
 macchanger-gtk 1.1-4 in bionic
  macchanger-gtk 1.1-4 in bionic amd64
  macchanger-gtk 1.1-4 in bionic arm64
  macchanger-gtk 1.1-4 in bionic armhf
  macchanger-gtk 1.1-4 in bionic i386
  macchanger-gtk 1.1-4 in bionic ppc64el
  macchanger-gtk 1.1-4 in bionic s390x
Comment: Removed in Debian, no maintenance; LP: #1765178
Remove [y|N]? y
2 packages successfully removed.