As you may be aware, some of the more recent and popular browsers (unlike lynx) fill in saved usernames & passwords automatically on login pages. This does also happen on Special:Preferences; browsers fill in "Old password:" in the section "User profile" -> "Change password". When the user changes anything in his preferences, but omit changing anything in the "Change password" section, saving their preferences fail ("Incorrect password entered. Please try again."). This is because MediaWiki assumes that the user wants a new password if he fills in any of the "Change password"-fields; however browsers do not automatically fill in the "New password:" and "Retype new password:" so it looks to MediaWiki as if the user tried to change his password to void (which is an invalid request).

I think a more practical behavior for MediaWiki would be to ignore a "Change password"-request, if only "Old password:" has been filled in.

Version: unspecified
Severity: normal