Two security patches are being merged (Jenkins is processing now for the Flow one, TextExtracts already merged) for TextExtracts and Flow:

https://gerrit.wikimedia.org/r/#/c/229030/ https://gerrit.wikimedia.org/r/#/c/229031/

It is recommended to upgrade to these if possible. There is a possible vulnerability if you are running both TextExtracts and Flow (may nor may not affect other extensions with TextExtracts):

Thanks,

Matt Flaschen