Apr 30 2017
Thanks for taking these actions @Bawolff
Apr 28 2017
Fair enough, although I kinda got that :). My point is that a lot of people will use the tarball and will not get the fix (if they update at all). The fix is for example also not in Debian's version (https://sources.debian.net/src/mediawiki/1:1.27.2-1/extensions/SyntaxHighlight_GeSHi/SyntaxHighlight_GeSHi.class.php/).
Apr 18 2017
This issue is reported as fixed in 1.28.1 / 1.27.2, but I can't seem to find the fix.