Thanks to all, including those who are or were contributing unplanned extra time, including over the weekend. Also, thanks to those who engaged off-wiki on Discord (and probably elsewhere), and to anyone who may have toiled quietly in the background. Your efforts are appreciated.
Pine🌲 On Wed, Oct 28, 2026 at 4:05 PM Christophe Henner via Wikimedia-l < [email protected]> wrote: > No one answered you, but thanks for dealing with this messy situation so > well. > > I was grumbling thinking "I need to spend some time restarting my tools" > to wake up a morning with all my tools online thanks to your work (and a > smart mass restart ^^). > > Thanks everyone that had to cope with those vulnerabilities and all the > work attached :) > > -- > Christophe > > > On Wed, 28 Oct 2026 at 16:59, Johan Jönsson via Wikimedia-l < > [email protected]> wrote: > >> Hey everyone, >> >> Thank you for your patience as we’ve been dealing with this security >> issue. It’s been a lot of hard work, for the Wikimedia technical community >> and the web in general. >> >> Toolforge and Cloud VPS have been back up since last Thursday, 22 >> October. Many key tools the editing communities depend on have been >> gradually restored. >> >> Some tools need the respective volunteer maintainers to restart them. >> Others still need to upgrade to a patched PHP version – some tools were >> using older versions of PHP which are not supported by the recent security >> patches, and these will require maintainers to carefully upgrade to a more >> recent version, which might require additional effort to make them >> compatible. You can follow the work here: >> >> https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community#Exceptions >> >> Best, >> >> >> *Johan Jönsson*Manager, Movement Communications >> Wikimedia Foundation <https://wikimediafoundation.org/> >> >> >> On Fri, Oct 23, 2026 at 10:55 AM Johan Jönsson <[email protected]> >> wrote: >> >>> Some tools (which are not using PHP) are back up. See more: >>> >>> https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community >>> >>> https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/GO6ICTSJYMAL2VINTY3MZKGRMRCD7BCZ/ >>> >>> There is also an FAQ aimed at technical contributors on the progression >>> of the work: >>> >>> https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community#FAQs >>> >>> Best, >>> >>> >>> *Johan Jönsson*Manager, Movement Communications >>> Wikimedia Foundation <https://wikimediafoundation.org/> >>> >>> >>> On Wed, Oct 21, 2026 at 10:44 PM Johan Jönsson <[email protected]> >>> wrote: >>> >>>> An update outlining the work to bring back affected tools: >>>> >>>> https://diff.wikimedia.org/2026/10/21/impact-of-php-vulnerabilities-on-wikimedia-cloud-services/ >>>> >>>> Best, >>>> >>>> >>>> *Johan Jönsson*Manager, Movement Communications >>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>> >>>> >>>> On Wed, Oct 21, 2026 at 12:19 PM Johan Jönsson <[email protected]> >>>> wrote: >>>> >>>>> Some updates on affected services are posted here: >>>>> >>>>> https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community >>>>> >>>>> Best, >>>>> >>>>> >>>>> *Johan Jönsson*Manager, Movement Communications >>>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>>> >>>>> >>>>> On Wed, Oct 21, 2026 at 12:10 AM Johan Jönsson <[email protected]> >>>>> wrote: >>>>> >>>>>> Hey everyone – due to a critical security advisory about the PHP >>>>>> language <https://www.php.net/archive/2026.php#2026-10-20-1> (which >>>>>> we depend on), many Wikimedia services are going to be affected. We are >>>>>> hoping to avoid downtime to the wikis, but some supporting tools and >>>>>> services are unfortunately going to be impacted. This is a complex >>>>>> operation on short notice and we are still figuring out the details. More >>>>>> information will come later this week. >>>>>> >>>>>> Best, >>>>>> >>>>>> >>>>>> *Johan Jönsson*Manager, Movement Communications >>>>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>>>> >>>>> _______________________________________________ >> Wikimedia-l mailing list -- [email protected], guidelines >> at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and >> https://meta.wikimedia.org/wiki/Wikimedia-l >> Public archives at >> https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/ATEOE3YNFEFW2NEVUP65MPHCTMT4TF6X/ >> To unsubscribe send an email to [email protected] > > _______________________________________________ > Wikimedia-l mailing list -- [email protected], guidelines > at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and > https://meta.wikimedia.org/wiki/Wikimedia-l > Public archives at > https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/4LIDPILMX73RO76JPWWPENMH2DMJGTZB/ > To unsubscribe send an email to [email protected]
_______________________________________________ Wikimedia-l mailing list -- [email protected], guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l Public archives at https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/IKFMT5F33CRIMMTE3T4JG66GDMFSCL36/ To unsubscribe send an email to [email protected]
