A quick hack fixed this issue:
replacing all references to publicly_queryable with public in widget-query-posts.php
I did this after finding this ticket in trac:
http://core.trac.ww.wp.xz.cn/ticket/17040
not sure if doing this has other consequences…
