Hey everyone, Thank you for your patience as we’ve been dealing with this security issue. It’s been a lot of hard work, for the Wikimedia technical community and the web in general.
Toolforge and Cloud VPS have been back up since last Thursday, 22 October. Many key tools the editing communities depend on have been gradually restored. Some tools need the respective volunteer maintainers to restart them. Others still need to upgrade to a patched PHP version – some tools were using older versions of PHP which are not supported by the recent security patches, and these will require maintainers to carefully upgrade to a more recent version, which might require additional effort to make them compatible. You can follow the work here: https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community#Exceptions Best, *Johan Jönsson*Manager, Movement Communications Wikimedia Foundation <https://wikimediafoundation.org/> On Fri, Oct 23, 2026 at 10:55 AM Johan Jönsson <[email protected]> wrote: > Some tools (which are not using PHP) are back up. See more: > > https://wikitech.wikimedia.org/wiki/Talk:Incidents/2026-10-21_PHP_security_update/Community > > https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/GO6ICTSJYMAL2VINTY3MZKGRMRCD7BCZ/ > > There is also an FAQ aimed at technical contributors on the progression of > the work: > > https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community#FAQs > > Best, > > > *Johan Jönsson*Manager, Movement Communications > Wikimedia Foundation <https://wikimediafoundation.org/> > > > On Wed, Oct 21, 2026 at 10:44 PM Johan Jönsson <[email protected]> > wrote: > >> An update outlining the work to bring back affected tools: >> >> https://diff.wikimedia.org/2026/10/21/impact-of-php-vulnerabilities-on-wikimedia-cloud-services/ >> >> Best, >> >> >> *Johan Jönsson*Manager, Movement Communications >> Wikimedia Foundation <https://wikimediafoundation.org/> >> >> >> On Wed, Oct 21, 2026 at 12:19 PM Johan Jönsson <[email protected]> >> wrote: >> >>> Some updates on affected services are posted here: >>> >>> https://wikitech.wikimedia.org/wiki/Incidents/2026-10-21_PHP_security_update/Community >>> >>> Best, >>> >>> >>> *Johan Jönsson*Manager, Movement Communications >>> Wikimedia Foundation <https://wikimediafoundation.org/> >>> >>> >>> On Wed, Oct 21, 2026 at 12:10 AM Johan Jönsson <[email protected]> >>> wrote: >>> >>>> Hey everyone – due to a critical security advisory about the PHP >>>> language <https://www.php.net/archive/2026.php#2026-10-20-1> (which we >>>> depend on), many Wikimedia services are going to be affected. We are hoping >>>> to avoid downtime to the wikis, but some supporting tools and services are >>>> unfortunately going to be impacted. This is a complex operation on short >>>> notice and we are still figuring out the details. More information will >>>> come later this week. >>>> >>>> Best, >>>> >>>> >>>> *Johan Jönsson*Manager, Movement Communications >>>> Wikimedia Foundation <https://wikimediafoundation.org/> >>>> >>>
_______________________________________________ Wikimedia-l mailing list -- [email protected], guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l Public archives at https://lists.wikimedia.org/hyperkitty/list/[email protected]/message/ATEOE3YNFEFW2NEVUP65MPHCTMT4TF6X/ To unsubscribe send an email to [email protected]
