Hello all, This message is important to everyone running an instance of Wikibase including the Query Service GUI.
We just released a new version of the Wikidata Query Service GUI. This release is primarily to fix several security issues described in T238822 <https://phabricator.wikimedia.org/T238822> and T238824 <https://phabricator.wikimedia.org/T238824> (these tasks will be made public soon). These are different from the previous fix we deployed on November 7th. The fix has been successfully deployed for the Wikidata Query Service. In order to keep your instance safe, please make sure to update your Query Service GUI! Git repositories, releases and currently active version docker images also include the latest fixed code (see links below). If you have a local test setup using the docker-compose example then see: https://gist.github.com/addshore/36f8d6fe2331d28ca8f70df5abda20fd Gerrit repositories: - https://gerrit.wikimedia.org/r/#/c/wikidata/query/gui/+/553311/ - https://gerrit.wikimedia.org/r/#/c/wikidata/query/gui-deploy/+/553313/ Docker images: - latest: digest: sha256:6570acb916b429f10ccb3bf3479b66aa6697b3fb3982166a09aba87eeaba7c90 - legacy: digest: sha256:4503257bbe1744ce389f07f6dcbaf53db7569cc3e570e30dd5a85c8d0073a39d If you have any questions or issues updating your code, please let us know (you can write me an email, or ask in the Wikibase Telegram group <https://t.me/joinchat/HGjGexZ9NE7BwpXzMsoDLA>) Thanks for your understanding, Cheers, -- Léa Lacroix Project Manager Community Communication for Wikidata Wikimedia Deutschland e.V. Tempelhofer Ufer 23-24 10963 Berlin www.wikimedia.de Wikimedia Deutschland - Gesellschaft zur Förderung Freien Wissens e. V. Eingetragen im Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Nummer 23855 Nz. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/029/42207. _______________________________________________ Wikitech-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikitech-l
