Two security patches are being merged (Jenkins is processing now for the
Flow one, TextExtracts already merged) for TextExtracts and Flow:
https://gerrit.wikimedia.org/r/#/c/229030/
https://gerrit.wikimedia.org/r/#/c/229031/
It is recommended to upgrade to these if possible. There is a possible
vulnerability if you are running both TextExtracts and Flow (may nor may
not affect other extensions with TextExtracts):
Thanks,
Matt Flaschen