Bug#1131939: malcontent CVE-2026-44931

[Jeremy Bícha]

On Tue, May 26, 2026 at 11:29 AM Salvatore Bonaccorso <carnil at debian.org> wrote:
> Maybenot RC, but if there is not a reason to introduce a a known
> issue, is there a reason you need o rebase on 0.14.0? Can we keep it
> at the version it is now to not get the issue into forky and see if a
> solution appears upstream?

We patch gnome-control-center to keep using malcontent 0.13. This is
fine for now, but eventually we will want the newer version. I haven't
tested malcontent 0.14 but the NEWS suggests that it has new features
that may make the parental controls more effective. (My somewhat harsh
review is that malcontent 0.13 isn't very effective so I appreciate
improvement.)

https://salsa.debian.org/gnome-team/gnome-control-center/-/blob/debian/latest/debian/patches/debian/Revert-wellbeing-Synchronize-settings-with-malcontent.patch

https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/main/NEWS

Thank you,
Jeremy Bícha