A quick hack fixed this issue:
replacing all references to publicly_queryable with public in widget-query-posts.php
I did this after finding this ticket in trac:
https://core.trac.www.ads-software.com/ticket/17040
not sure if doing this has other consequences…
