Yes, that's still an issue, the warnings changed though. Rebuild gnome-software with DEB_BUILD_OPTIONS="noopt nostrip" and starting under valgrind when some updates are available gives those

==21894== Invalid read of size 1
==21894==    at 0xA5C0F06: compare_version (gs-plugin-apt.c:122)
==21894==    by 0xA5C1267: compare_dpkg_version (gs-plugin-apt.c:194)
==21894==    by 0xA5C1293: version_newer (gs-plugin-apt.c:200)
==21894==    by 0xA5C1CEE: get_changelog (gs-plugin-apt.c:424)
==21894==    by 0xA5C20A5: gs_plugin_refine (gs-plugin-apt.c:499)
==21894==    by 0x808B76E: gs_plugin_loader_run_refine (gs-plugin-loader.c:231)
==21894==    by 0x808BDDA: gs_plugin_loader_run_results (gs-plugin-loader.c:371)
==21894==    by 0x808C8DD: gs_plugin_loader_get_updates_thread_cb (gs-plugin-loader.c:726)
==21894==    by 0x4D1311C: g_task_thread_pool_thread (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4706.0)
==21894==    by 0x4F299E3: g_thread_pool_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x4F28F89: g_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x5037189: start_thread (pthread_create.c:333)
==21894==    by 0x513930D: clone (clone.S:122)
==21894==  Address 0x12571a7c is 12 bytes inside a block of size 20 free'd
==21894==    at 0x402D378: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==21894==    by 0x4F072BF: g_free (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x805CE33: gs_app_set_version (gs-app.c:1156)
==21894==    by 0xA5C2018: gs_plugin_refine (gs-plugin-apt.c:484)
==21894==    by 0x808B76E: gs_plugin_loader_run_refine (gs-plugin-loader.c:231)
==21894==    by 0x808BDDA: gs_plugin_loader_run_results (gs-plugin-loader.c:371)
==21894==    by 0x808D800: gs_plugin_loader_get_installed_thread_cb (gs-plugin-loader.c:1101)
==21894==    by 0x4D1311C: g_task_thread_pool_thread (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4706.0)
==21894==    by 0x4F299E3: g_thread_pool_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x4F28F89: g_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x5037189: start_thread (pthread_create.c:333)
==21894==    by 0x513930D: clone (clone.S:122)
==21894==  Block was alloc'd at
==21894==    at 0x402C19C: malloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==21894==    by 0x4F07198: g_malloc (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x4F205FD: g_strdup (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x805CE41: gs_app_set_version (gs-app.c:1157)
==21894==    by 0xA5C2018: gs_plugin_refine (gs-plugin-apt.c:484)
==21894==    by 0x808B76E: gs_plugin_loader_run_refine (gs-plugin-loader.c:231)
==21894==    by 0x808BDDA: gs_plugin_loader_run_results (gs-plugin-loader.c:371)
==21894==    by 0x808C8DD: gs_plugin_loader_get_updates_thread_cb (gs-plugin-loader.c:726)
==21894==    by 0x4D1311C: g_task_thread_pool_thread (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4706.0)
==21894==    by 0x4F299E3: g_thread_pool_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x4F28F89: g_thread_proxy (in /lib/i386-linux-gnu/libglib-2.0.so.0.4706.0)
==21894==    by 0x5037189: start_thread (pthread_create.c:333)
==21894==    by 0x513930D: clone (clone.S:122)