Package: libxkbregistry0
Version: 1.7.0-2
Followup-For: Bug #1153019

Hi,

I hit this on Debian 13 (trixie) on 2026-11-05 with libxkbregistry0 1.7.0-2,
libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3, gnome-shell 48.7-0+deb13u2 
(Wayland).

Impact: it was impossible to log in graphically. After entering the password
in GDM the screen went black and returned to the greeter (6 times that
morning); afterwards the greeter was grey and unresponsive. Only a text
console login worked.

Trigger: api.met.no (the backend libgweather uses) returned "502 Bad Gateway"
as an HTML page. libgweather fed that to libxml2, libxml2 raised a parse
error, and the generic error handler that libxkbregistry had installed
earlier (with an already freed rxkb_context) was called. So any GNOME user
with a weather location configured (Clocks/Weather, or the weather in the
top bar calendar) can end up in a login loop whenever the weather service
has an outage. This is not something a user can easily diagnose.

Kernel log:
  gnome-shell[...]: general protection fault ... in libxkbregistry.so.0.0.0

Backtrace (shortened, from coredumpctl):
  #0  libxkbregistry.so.0      (xml error handler, dangling context)
  #3  __xmlRaiseError          (libxml2)
  #10 xmlParseMemory           (libxml2)
  #11 libgweather-4.so.0
  #14 libsoup-3.0.so.0

Workaround: from a text console, clear the weather locations
  gsettings set org.gnome.shell.weather automatic-location false
  gsettings set org.gnome.shell.weather locations '[]'
  gsettings set org.gnome.Weather locations '[]'
and restart gdm.

This is upstream issue #529, fixed in libxkbcommon 1.8.0
(https://github.com/xkbcommon/libxkbcommon/issues/529, fix in commit
a47961b15a2539a417bd6f20570074ec01aadec4). The version in trixie-backports
(1.13.1) contains the fix, but trixie itself still ships 1.7.0.

Given that an external service outage can lock users out of their desktop,
could the fix be backported to trixie via a stable point release?

Thanks!


-- System Information:
Debian Release: 13.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.115+deb13.1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libxkbregistry0 depends on:
ii  libc6          2.41-12+deb13u4
ii  libxkbcommon0  1.7.0-2
ii  libxml2        2.12.7+dfsg+really2.9.14-2.1+deb13u3

libxkbregistry0 recommends no packages.

libxkbregistry0 suggests no packages.

-- no debconf information

Reply via email to