The 1.31.14 version fixes an issue with the backports in the 1.31.13 release.
The patches linked here need applying on top of the previous patches for 1.31.12. See the previous email for those patches. The full downloads here contain all the previous fixes from the security and maintenance release.
Once again, I apologise for the inconvenience of the issues with the previous release. Going forward, we're going to be looking to run more testing on the tarballs (in this case, static analysis via Phan) to hopefully prevent these issues in future.
********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.tar.gz https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.zip
Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.14.tar.gz https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.14.zip
Patch to previous version (1.31.13): https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.patch.gz https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.patch.zip
GPG signatures: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.14.tar.gz.... https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.14.zip.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.zip.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.patch.gz.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.14.patch.zip.si...
Public keys: https://www.mediawiki.org/keys/keys.html
mediawiki-announce@lists.wikimedia.org