Hello all,

-and sorry for cross-posting-

This message is important to everyone running an instance of Wikibase including the Query Service GUI.

We just released a new version of the Wikidata Query Service GUI. This release is primarily to fix a security issue described in T233213 (hidden task, will be made public soon). The fix has been successfully deployed for the Wikidata Query Service. 

In order to keep your instance safe, please make sure to update your Query Service GUI!

Git repositories, releases and currently active version docker images also include the latest fixed code (see links below). If you have a local test setup using the docker-compose example then see: https://gist.github.com/addshore/36f8d6fe2331d28ca8f70df5abda20fd

Gerrit repositories:

• wikidata/query/gui after commit d9f964b88c01748e278ca8c4b8929a8ef0ef0267 

• wikidata/query/gui-deploy after commit 7445472ab0ec61890b42e4d524416fbc6a18aa8a

• wikidata/query/deploy after 094d9cda98f3fb706cf9c25aefa3eb33f9f6999a

Docker images:

• wdqs:0.3.6 (all versions of this tag)

• wdqs:latest from digest sha256:04237b42d0b904a2c49ecb7059c82ace8265ba0b7f690ee2d4b3004ad39517ee

• wdqs-frontend:latest from digest sha256:1308a7d6622b1e141783336fb52cd6993973321077f58359fbf907b77e105ca3

• wdqs-frontend:legacy from digest sha256:f830abd53fe5e79299011211a2aab7ad947181e56785c06eed6e9bd6b430d4ce

Downloadable releases:

• https://archiva.wikimedia.org/repository/snapshots/org/wikidata/query/rdf/service/0.3.6-SNAPSHOT/

If you have any questions or issues updating your code, please let us know (you can write me an email, or ask in the Wikibase Telegram group)

Thanks for your understanding,

Cheers,