No one answered you, but thanks for dealing with this messy situation so well.
I was grumbling thinking "I need to spend some time restarting my tools" to wake up a morning with all my tools online thanks to your work (and a smart mass restart ^^). Thanks everyone that had to cope with those vulnerabilities and all the work attached :) -- Christophe On Wed, 28 Oct 2026 at 16:59, Johan Jönsson via Wikimedia-l < [email protected]> wrote: > Hey everyone, > > Thank you for your patience as we’ve been dealing with this security > issue. It’s been a lot of hard work, for the Wikimedia technical community > and the web in general. > > Toolforge and Cloud VPS have been back up since last Thursday, 22 October. > Many key tools the editing communities depend on have been gradually > restored. > > Some tools need the respective volunteer maintainers to restart them. > Others still need to upgrade to a patched PHP version – some tools were > using older versions of PHP which are not supported by the recent security > patches, and these will require maintainers to carefully upgrade to a more > recent version, which might require additional effort to make them > compatible. You can follow the work here: > > https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community#Exceptions > > Best, > > > *Johan Jönsson*Manager, Movement Communications > Wikimedia Foundation <https://wikimediafoundation.org/> > > > On Fri, Oct 23, 2026 at 10:55 AM Johan Jönsson <[email protected]> > wrote: > >> Some tools (which are not using PHP) are back up. See more: >> >> https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community >> >> https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/GO6ICTSJYMAL2VINTY3MZKGRMRCD7BCZ/ >> >> There is also an FAQ aimed at technical contributors on the progression >> of the work: >> >> https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community#FAQs >> >> Best, >> >> >> *Johan Jönsson*Manager, Movement Communications >> Wikimedia Foundation <https://wikimediafoundation.org/> >> >> >> On Wed, Oct 21, 2026 at 10:44 PM Johan Jönsson <[email protected]> >> wrote: >> >>> An update outlining the work to bring back affected tools: >>> >>> https://diff.wikimedia.org/2026/10/21/impact-of-php-vulnerabilities-on-wikimedia-cloud-services/ >>> >>> Best, >>> >>> >>> *Johan Jönsson*Manager, Movement Communications >>> Wikimedia Foundation <https://wikimediafoundation.org/> >>> >>> >>> On Wed, Oct 21, 2026 at 12:19 PM Johan Jönsson <[email protected]> >>> wrote: >>> >>>> Some updates on affected services are posted here: >>>> >>>> https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community >>>> >>>> Best, >>>> >>>> >>>> *Johan Jönsson*Manager, Movement Communications >>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>> >>>> >>>> On Wed, Oct 21, 2026 at 12:10 AM Johan Jönsson <[email protected]> >>>> wrote: >>>> >>>>> Hey everyone – due to a critical security advisory about the PHP >>>>> language <https://www.php.net/archive/2026.php#2026-10-20-1> (which >>>>> we depend on), many Wikimedia services are going to be affected. We are >>>>> hoping to avoid downtime to the wikis, but some supporting tools and >>>>> services are unfortunately going to be impacted. This is a complex >>>>> operation on short notice and we are still figuring out the details. More >>>>> information will come later this week. >>>>> >>>>> Best, >>>>> >>>>> >>>>> *Johan Jönsson*Manager, Movement Communications >>>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>>> >>>> _______________________________________________ > Wikimedia-l mailing list -- [email protected], guidelines > at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and > https://meta.wikimedia.org/wiki/Wikimedia-l > Public archives at > https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/ATEOE3YNFEFW2NEVUP65MPHCTMT4TF6X/ > To unsubscribe send an email to [email protected]
_______________________________________________ Wikimedia-l mailing list -- [email protected], guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l Public archives at https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/4LIDPILMX73RO76JPWWPENMH2DMJGTZB/ To unsubscribe send an email to [email protected]
